NVD

Id
4021  
Name
CVE-2008-4165  
Description
admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the ssl_access_log file or the referer string.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-09-22  
Modified Date
2009-07-23  
Seq
2008-4165  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
25555 4021 CVE-2008-4165 MDVSA-2008:193  View
25556 4021 CVE-2008-4165 31165  View
25557 4021 CVE-2008-4165 kolab-logfile-information-disclosure(45124)  View
25558 4021 CVE-2008-4165 https://qa.mandriva.com/show_bug.cgi?id=43434  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49561 JVNDB-2008-004871 Kolab Groupware Server の admin/user/create_user.php における平文パスワードを取得される脆弱性 Kolab Groupware Server の admin/user/create_user.php には、HTTP GET リクエスト内にユーザパスワードを配置するため、平文パスワードを取得される脆弱性が存在します。 CVE-2008-4165 34278 CVE-2008-4165 4021 4 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004871.html 2008-09-22 2012-09-25 View