Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2007-1462

The luci server component in conga preserves the password between page loads for the Add System/Cluster task flow by storing the password in the Value attribute of a password entry field, which allows attackers to steal the password by performing a "view source" or other operation to obtain the web page. NOTE: there are limited circumstances under which such an attack is feasible.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.7%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2007-1462
  • Conga » Conga » Version: N/A
    cpe:2.3:a:conga:conga:-
  • Redhat » Linux » Version: N/A
    cpe:2.3:o:redhat:linux:-
  • Redhat » Linux » Version: 1.0
    cpe:2.3:o:redhat:linux:1.0
  • Redhat » Linux » Version: 1.1
    cpe:2.3:o:redhat:linux:1.1
  • Redhat » Linux » Version: 2.0
    cpe:2.3:o:redhat:linux:2.0
  • Redhat » Linux » Version: 2.0.34
    cpe:2.3:o:redhat:linux:2.0.34
  • Redhat » Linux » Version: 2.1
    cpe:2.3:o:redhat:linux:2.1
  • Redhat » Linux » Version: 2.4.2
    cpe:2.3:o:redhat:linux:2.4.2
  • Redhat » Linux » Version: 2.6.2
    cpe:2.3:o:redhat:linux:2.6.2
  • Redhat » Linux » Version: 3.0
    cpe:2.3:o:redhat:linux:3.0
  • Redhat » Linux » Version: 3.0.3
    cpe:2.3:o:redhat:linux:3.0.3
  • Redhat » Linux » Version: 4.0
    cpe:2.3:o:redhat:linux:4.0
  • Redhat » Linux » Version: 4.1
    cpe:2.3:o:redhat:linux:4.1
  • Redhat » Linux » Version: 4.2
    cpe:2.3:o:redhat:linux:4.2
  • Redhat » Linux » Version: 5.0
    cpe:2.3:o:redhat:linux:5.0
  • Redhat » Linux » Version: 5.1
    cpe:2.3:o:redhat:linux:5.1
  • Redhat » Linux » Version: 5.2
    cpe:2.3:o:redhat:linux:5.2
  • Redhat » Linux » Version: 6.0
    cpe:2.3:o:redhat:linux:6.0
  • Redhat » Linux » Version: 6.1
    cpe:2.3:o:redhat:linux:6.1
  • Redhat » Linux » Version: 6.2
    cpe:2.3:o:redhat:linux:6.2
  • Redhat » Linux » Version: 6.2e
    cpe:2.3:o:redhat:linux:6.2e
  • Redhat » Linux » Version: 7
    cpe:2.3:o:redhat:linux:7
  • Redhat » Linux » Version: 7.0
    cpe:2.3:o:redhat:linux:7.0
  • Redhat » Linux » Version: 7.1
    cpe:2.3:o:redhat:linux:7.1
  • Redhat » Linux » Version: 7.2
    cpe:2.3:o:redhat:linux:7.2
  • Redhat » Linux » Version: 7.3
    cpe:2.3:o:redhat:linux:7.3
  • Redhat » Linux » Version: 8.0
    cpe:2.3:o:redhat:linux:8.0
  • Redhat » Linux » Version: 9
    cpe:2.3:o:redhat:linux:9
  • Redhat » Linux » Version: 9.0
    cpe:2.3:o:redhat:linux:9.0


Contact Us

Shodan ® - All rights reserved