CVE-2005-4862

2007-09-1400:00:00

mitre

www.cve.org

xwiki vulnerability

cleartext passwords

remote attackers

sensitive information

search functionality

AI Score

6.1

Confidence

Low

EPSS

0.003

Percentile

70.4%

JSON

The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sensitive information via a search string that matches a password.

References

jira.xwiki.org/jira/browse/XWIKI-70