Vulnerabilities > CVE-2012-2299 - Credentials Management vulnerability in Ubercart

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
ubercart
CWE-255
NVD
Published: 2012-08-14
Updated: 2024-11-21

Summary

The Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive information by reading from the database.

Vulnerable Configurations

Part Description Count
Application
Ubercart
34
Application
Drupal
1

Common Weakness Enumeration (CWE)

References