PT-2023-25980 · Unknown · Feedbacksystem

Name of the Vulnerable Software and Affected Versions: Feedbacksystem versions prior to 1.19.2 Description: The issue concerns the storage of passwords in clear text for users utilizing LDAP login. Specifically, the LDAP user's password is passed unencrypted in the LoginController.scala and store...

Active! mail vulnerable to information disclosure

Overview Active! mail contains an information disclosure vulnerability. Active! mail provided by TransWARE is a webmail software. Active! mail contains an information disclosure vulnerability. Mitsuru Ogino of Sugiyama Jogakuen reported this vulnerability to IPA. JPCERT/CC coordinated with the...