CVE-2007-1462: Medium severity redhat Linux vulnerability
The luci server component in conga preserves the password between page loads for the Add System/Cluster task flow by storing the password in the Value attribute of a password entry field, which allows attackers to steal the password by performing a "view source" or other operation to obtain the web page. NOTE: there are limited circumstances under which such an attack is feasible.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1462?
CVE-2007-1462 has a moderate severity level due to the potential for password exposure.
How do I fix CVE-2007-1462?
To fix CVE-2007-1462, ensure that sensitive data, such as passwords, are not stored in the Value attribute of form fields.
Which software is affected by CVE-2007-1462?
CVE-2007-1462 affects the Conga software component specifically.
Can attackers exploit CVE-2007-1462 remotely?
Yes, attackers can exploit CVE-2007-1462 remotely through web browser interactions.
What are the implications of CVE-2007-1462 for user data?
CVE-2007-1462 can lead to unauthorized access to user passwords, compromising user data security.