CVE-2001-1464: High severity businessobjects crystal reports vulnerability
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1464?
CVE-2001-1464 has a high severity, as it exposes sensitive credentials in cleartext.
How do I fix CVE-2001-1464?
To fix CVE-2001-1464, ensure that you upgrade to a patched version of SAP Crystal Reports that addresses this vulnerability.
What type of attack can CVE-2001-1464 facilitate?
CVE-2001-1464 can facilitate credential theft, allowing remote attackers to capture usernames and passwords from the URL.
Is CVE-2001-1464 easily exploitable?
Yes, CVE-2001-1464 is easily exploitable as it relies on embedded credentials within HTML pages.
Which software is affected by CVE-2001-1464?
CVE-2001-1464 affects various versions of SAP Crystal Reports that improperly handle credentials for password protected databases.