CVE-2002-0324

Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg file which contains the administrator name and password in cleartext, then retrieving the file from the web server before the Greymatter administrator performs a "Clear And Exit" action.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:noah_gray:graymatter:1.1:*:*:*:*:*:*:*
cpe:2.3:a:noah_gray:graymatter:1.1b:*:*:*:*:*:*:*
cpe:2.3:a:noah_gray:graymatter:1.2b:*:*:*:*:*:*:*
cpe:2.3:a:noah_gray:graymatter:1.21:*:*:*:*:*:*:*

History

No history.

Information

Published : 2002-06-25 04:00

Updated : 2024-02-04 16:31


NVD link : CVE-2002-0324

Mitre link : CVE-2002-0324

CVE.ORG link : CVE-2002-0324


JSON object : View

Products Affected

noah_gray

  • graymatter