Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the ssl_access_log file or the referer string.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kolab Groupware Server 'admin/user/create_user.php' 信息泄露漏洞
Vulnerability Description
Kolab Groupware Server 1.0.0的admin/user/create_user.php在一个HTTP GET 请求中放置了一个用户密码, 这会允许本地管理员, 甚至远程攻击者, 通过读取ssl_access_log文件或参考字符串来获得cleartext密码。
CVSS Information
N/A
Vulnerability Type
N/A