CVE-2002-1848: Tightvnc

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords.

Affected products

• Tightvnc Tightvnc: version 1.2 only; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only

Published 2002-12-31. Last modified 2026-06-16.