Page 2 of 6 results (0.003 seconds)

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords. • http://www.kb.cert.org/vuls/id/403307 https://exchange.xforce.ibmcloud.com/vulnerabilities/7928 •