Webauth
by Stanford
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2013-2106 | 0.00 | — | 0.02 | Dec 3, 2019 | webauth before 4.6.1 has authentication credential disclosure | |||
| CVE-2009-2945 | 0.00 | — | 0.01 | Sep 15, 2009 | weblogin/login.fcgi (aka the WebLogin login script) in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by… |
- CVE-2013-2106Dec 3, 2019risk 0.00cvss —epss 0.02
webauth before 4.6.1 has authentication credential disclosure
- CVE-2009-2945Sep 15, 2009risk 0.00cvss —epss 0.01
weblogin/login.fcgi (aka the WebLogin login script) in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by…