CVE

Id
34282  
CVE No.
CVE-2008-4165  
Status
Candidate  
Description
admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the ssl_access_log file or the referer string.  
Phase
Assigned (20080922)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
375421 34282 CVE-2008-4165 CONFIRM:https://qa.mandriva.com/show_bug.cgi?id=43434  View
375422 34282 CVE-2008-4165 MANDRIVA:MDVSA-2008:193  View
375423 34282 CVE-2008-4165 URL:http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:193  View
375424 34282 CVE-2008-4165 BID:31165  View
375425 34282 CVE-2008-4165 URL:http://www.securityfocus.com/bid/31165  View
375426 34282 CVE-2008-4165 XF:kolab-logfile-information-disclosure(45124)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49562 JVNDB-2008-004872 iScripts EasyIndex の detaillist.php における SQL インジェクションの脆弱性 iScripts EasyIndex の detaillist.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-4169 34282 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004872.html  View