[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLyGNwze0TOhOi9npKr-FJBlw56tCYDf6HeXr_4Kbya8":3,"g5a-risk:CVE-2008-1394":145},{"success":4,"data":5,"meta":143},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":55,"references":56,"referencesCount":30,"weaknesses":87,"weaknessesCount":91,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":141,"notableEvents":142},"CVE-2008-1394","What is CVE-2008-1394?","Plone CMS before 3 places a base64 encoded form of the username and password in the __ac cookie for all user accounts, which makes it easier for remote attackers to obtain access by sniffing the network.","Plone CMS before 3 places a base64 encoded form of the username and password in the __ac cookie for all user accounts, which makes it easier for remote attac...","2008-03-20T00:44:00","2026-06-16T22:51:39.39",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":4,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.01438,[34,34,34,34,34,34,34],"High",[38,43,46,49,52],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"plone","plone_cms","*","cpe:2.3:a:plone:plone_cms:*:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"2.0.5","cpe:2.3:a:plone:plone_cms:2.0.5:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":47,"criteria":48,"vulnerable":4},"2.1.2","cpe:2.3:a:plone:plone_cms:2.1.2:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":50,"criteria":51,"vulnerable":4},"2.1.3","cpe:2.3:a:plone:plone_cms:2.1.3:rc1:*:*:*:*:*:*",{"vendor":39,"product":40,"version":53,"criteria":54,"vulnerable":4},"2.5","cpe:2.3:a:plone:plone_cms:2.5:*:*:*:*:*:*:*",5,[57,61,65,69,73,77,79,81,83,85],{"url":58,"source":59,"tags":60},"http:\u002F\u002Fplone.org\u002Fabout\u002Fsecurity\u002Foverview\u002Fsecurity-overview-of-plone\u002F","Plone",[],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F3754","Securityreason",[],{"url":66,"source":67,"tags":68},"http:\u002F\u002Fwww.procheckup.com\u002FHacking_Plone_CMS.pdf","Procheckup",[],{"url":70,"source":71,"tags":72},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F489544\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":74,"source":75,"tags":76},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F41425","Ibmcloud",[],{"url":58,"source":59,"tags":78},[],{"url":62,"source":63,"tags":80},[],{"url":66,"source":67,"tags":82},[],{"url":70,"source":71,"tags":84},[],{"url":74,"source":75,"tags":86},[],[88],{"id":89,"name":89,"description":90},"Unknown","CWE-255",1,[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2008-1394? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2008-1394, a high severity cyber security vulnerability from 2008. Plone CMS before 3 places a base64 encoded form of the usern...","CVE-2008-1394, CVE-2008-1394 vulnerability, CVE-2008-1394 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, plone security, plone_cms vulnerability","\u002Fwhat-is\u002Fcve-2008-1394",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2008-1394","Cybersecurity","CVE-2008-1394, CVE-2008-1394 vulnerability, CVE-2008-1394 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119],{"Operator":28,"Negate":28,"Nodes":120},[121],{"Operator":122,"Negate":32,"CPEMatch":123},"OR",[124,127,129,131,133,135,138],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":125,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":126},"C4A55D03-9FDD-466B-BA65-42996B4F802C","2.5.1",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":128,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"079F5BAC-8873-4087-9030-3036E84B06FC",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":130,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"DA64F59B-A021-4EE5-8CCD-BB7FA0FB5B51",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":132,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"64130585-46A0-4F0D-9DD1-8E42AF2CE054",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":134,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"09B101F0-679D-4346-B35E-113E27C952B4",{"Vulnerable":4,"Criteria":136,"MatchCriteriaID":137,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:plone:plone_cms:2.5:beta1:*:*:*:*:*:*","489E848B-DB59-4FCB-85B8-7338547013AB",{"Vulnerable":4,"Criteria":139,"MatchCriteriaID":140,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:plone:plone_cms:2.5:beta2:*:*:*:*:*:*","BABF434A-91C0-490B-BD2A-FBE83F8AA954",[],[],{"lastModified":11,"cacheTime":144,"version":22},1792362722239,{"score":146,"band":147,"action":148,"scoredAt":149},46,"Medium","Plan remediation","2026-10-17T06:35:48.433191+00:00"]