296,213
Total vulnerabilities in the database
Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by reading the password from the source file, e.g. from the browser's cache.
Software | From | Fixed in |
---|---|---|
workforceroi / xpede | 4.1 | 4.1.x |
workforceroi / xpede | 7.0 | 7.0.x |