CVE

Id
24819  
CVE No.
CVE-2007-1462  
Status
Candidate  
Description
The luci server component in conga preserves the password between page loads for the Add System/Cluster task flow by storing the password in the Value attribute of a password entry field, which allows attackers to steal the password by performing a "view source" or other operation to obtain the web page. NOTE: there are limited circumstances under which such an attack is feasible.  
Phase
Assigned (20070315)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
245782 24819 CVE-2007-1462 CONFIRM:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228637  View
245783 24819 CVE-2007-1462 OSVDB:35086  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54822 JVNDB-2007-003514 Inkscape の whiteboard Jabber プロトコルにおけるフォーマットストリングの脆弱性 Inkscape の whiteboard Jabber プロトコルには、フォーマットストリングの脆弱性が存在します。 CVE-2007-1464 24819 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003514.html  View