CVE-2003-1394

The CVE-2003-1394 entry concerns CoffeeCup Software Password Wizard 4.0. Affected component/file: the .apw file stored under the web document root. Root-cause: insufficient access control on the stored credentials, enabling remote attackers to obtain usernames and passwords via a direct request t...