Every CVE Search/ Get API key

CVE-2000-0434

The administrative password for the Allmanage web site administration software is stored in...

7.5 High

The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers.

Exploit likelihood

1.39%Up 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers.

Record
CVE-2000-0434
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers.

Record
CVE-2000-0434
Updated
2026-11-02
EUVDEUVD-2000-0433 No score

The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers.

Record
EUVD-2000-0433
Updated
2026-11-03
GitHub AdvisoriesGHSA-vhfh-368p-rg9f No score

The administrative password for the Allmanage web site administration software is stored in...

The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers.

Record
GHSA-vhfh-368p-rg9f
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2000-0434 is a high vulnerability (CVSS 7.5) in Matthew Redman Allmanage, published May 13, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. No source names a fixed version.

References

MoveEnter Open