[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9lFCTMmUtjHHQncR5K_uN1kEksgnnXyX_9DeWDbPZiQ":3,"g5a-risk:CVE-2008-1393":126},{"success":4,"data":5,"meta":124},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":28,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":41,"references":42,"referencesCount":79,"weaknesses":80,"weaknessesCount":41,"isActivelyExploited":30,"cisaInfo":28,"otxData":28,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":122,"notableEvents":123},"CVE-2008-1393","What is CVE-2008-1393?","Plone CMS 3.0.5, and probably other 3.x versions, places a base64 encoded form of the username and password in the __ac cookie for the admin account, which makes it easier for remote attackers to obtain administrative privileges by sniffing the network.","Plone CMS 3.0.5, and probably other 3.x versions, places a base64 encoded form of the username and password in the __ac cookie for the admin account, which m...","2008-03-20T00:44:00","2026-06-16T22:51:39.273",10,"AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":31},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":12,"ImpactScore":12,"ACInsufInfo":30,"ObtainAllPrivilege":4,"ObtainUserPrivilege":30,"ObtainOtherPrivilege":30,"UserInteractionRequired":30},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","COMPLETE","",null,"HIGH",false,[],0.02904,[32,32,32,32,32,32,32],"Critical",[36],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"plone","plone_cms","*","cpe:2.3:a:plone:plone_cms:*:*:*:*:*:*:*:*",1,[43,48,51,55,59,63,67,69,71,73,75,77],{"url":44,"source":45,"tags":46},"http:\u002F\u002Fplone.org\u002Fdocumentation\u002Fhow-to\u002Fsecure-login-without-plain-text-passwords","Plone",[47],"Exploit",{"url":49,"source":45,"tags":50},"http:\u002F\u002Fplone.org\u002Fproducts\u002Fplone\u002Froadmap\u002F48?",[47],{"url":52,"source":53,"tags":54},"http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F3754","Securityreason",[],{"url":56,"source":57,"tags":58},"http:\u002F\u002Fwww.procheckup.com\u002FHacking_Plone_CMS.pdf","Procheckup",[],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F489544\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F41427","Ibmcloud",[],{"url":44,"source":45,"tags":68},[47],{"url":49,"source":45,"tags":70},[47],{"url":52,"source":53,"tags":72},[],{"url":56,"source":57,"tags":74},[],{"url":60,"source":61,"tags":76},[],{"url":64,"source":65,"tags":78},[],12,[81],{"id":82,"name":82,"description":83},"Unknown","CWE-255",[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2008-1393? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2008-1393, a critical severity cyber security vulnerability from 2008. Plone CMS 3.0.5, and probably other 3.x versions, places...","CVE-2008-1393, CVE-2008-1393 vulnerability, CVE-2008-1393 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, plone security, plone_cms vulnerability","\u002Fwhat-is\u002Fcve-2008-1393",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2008-1393","Cybersecurity","CVE-2008-1393, CVE-2008-1393 vulnerability, CVE-2008-1393 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111],{"Operator":28,"Negate":28,"Nodes":112},[113],{"Operator":114,"Negate":30,"CPEMatch":115},"OR",[116,119],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":117,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":118},"621080E0-CDB4-4C12-900E-F253CFC1A824","3",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":120,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":121},"10ED9859-7207-45AB-9E66-E5E09828839F","3.0.5",[],[],{"lastModified":11,"cacheTime":125,"version":22},1792266149973,{"score":127,"band":128,"action":129,"scoredAt":130},54,"Medium","Plan remediation","2026-10-17T06:35:48.433583+00:00"]