Vulnerability in Krusader
CVE-2005-3856
The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords in the panel URL field, which might allow attackers to access other sites.
EPSS: 0.010 (58.5th percentile) — read the EPSS interpretation.
Affected products
- Krusader — versions 1.60.0, 1.70.0_beta1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)