CVE-2007-3581 in Palo

Summary

The Jedox Palo 1.5 client transmits the password in cleartext, which might allow remote attackers to obtain the password by sniffing the network, as demonstrated by starting Excel with the Palo plugin, opening a cube, and performing an Insert View.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 07/05/2007
• Disclosure: 07/05/2007
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-312 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00295
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-3581
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-3581
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-3581/