PT-2017-6253

Name of the Vulnerable Software and Affected Versions Soplanning versions 1.32 and earlier Description The issue allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash. This is because Soplanning generates static links for sharing ICAL...

CVE-2014-8675: Exposure of Sensitive Information to an Unauthorized Actor

Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash...