StanfordWebauth
2 matches found
CVE-2009-2945
CVE-2009-2945 affects Stanford WebAuth WebLogin (weblogin/login.fcgi) versions 3.5.5, 3.6.0, 3.6.1. The issue arises when a POST is converted to a GET, causing user passwords to appear in URLs that may be logged by web servers, stored in browser history, or included in Referer headers. This enabl...
4.3CVSS6.3AI score0.00865EPSS
SaveWeb