Design/Logic Flaw

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

CVE-2017-14941

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

PT-2017-13766

Name of the Vulnerable Software and Affected Versions Jaspersoft JasperReports version 4.7 Description The issue allows a remote authenticated user to disclose saved credentials by accessing the "flow.html" page and reading the HTML source code when editing a Data Source connector. Recommendation...