Vulnerability in Businessobjects Crystal_reports
CVE-2001-1464
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.
EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.
Affected products
- Businessobjects Crystal_reports
- N/a — versions n/a
References
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Exploit, Third Party Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)