Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-04-21T04:00:00

Updated: 2024-08-08T04:58:11.269Z

Reserved: 2005-04-21T00:00:00

Link: CVE-2001-1464

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2001-01-10T05:00:00.000

Modified: 2017-07-11T01:29:08.663

Link: CVE-2001-1464

cve-icon Redhat

No data.