CVE-2001-1464 Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to o...
HighCVSS 7.5
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| businessobjects crystal reports | All versions | No fix listed |
References
- VU#403307 exploit third-party-advisory us-government-resource
- crystalreports-plaintext-auth-info(7928) vdb-entry