Lucene search
HistoryApr 21, 2005 - 4:00 a.m.
CVE-2001-1464
crystal reports
password protection
data security
html
cve-2001-1464
7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
83.0%
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.
Affected configurations
Node
businessobjectscrystal_reports
| CPE | Name | Operator | Version |
|---|---|---|---|
| businessobjects:crystal_reports | businessobjects crystal reports | eq | * |
7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
83.0%
Related for CVE-2001-1464