VULNERABILITY INTELLIGENCE
CVE-2007-3420
CVSS score7.5 NONE
EPSS probability1.13%
CISA KEVNot currently listed
Published2007-06-26
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The Random Cookie Password functionality in the loaduser function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 does not clear the (1) username, (2) password, (3) usertheme, and (4) userlang cookies for unauthorized users, which has unknown impact and remote attack vectors.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other