CVE-2005-2462: Kayako Liveresponse

Low severity, CVSS 2.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Kayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL, which allows local users and possibly remote attackers to gain privileges.

Affected products

• Kayako Liveresponse: version 2.0 only

Published 2005-12-31. Last modified 2026-06-16.