Description

The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sensitive information via a search string that matches a password.

Remediation

References

CVE-2005-4862

Related Vulnerabilities

WordPress Plugin Youzify-BuddyPress Community, User Profile, Social Network & Membership for WordPress Cross-Site Scripting (1.0.6)

WebLogic CVE-2020-2967 Vulnerability (CVE-2020-2967)

Oracle JRE CVE-2013-5805 Vulnerability (CVE-2013-5805)

WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler PHP Object Injection (5.7.0)

b2evolution Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3709)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2005-4862