Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2017-14941
HistoryOct 02, 2017 - 1:29 a.m.

CVE-2017-14941

2017-10-0201:29:00
Debian Security Bug Tracker
security-tracker.debian.org
8

0.001 Low

EPSS

Percentile

47.3%

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector.

OSVersionArchitecturePackageVersionFilename
Debian9alljasperreports<= 6.2.2-3jasperreports_6.2.2-3_all.deb

0.001 Low

EPSS

Percentile

47.3%