CVE-2013-2074 in KDE
Zusammenfassung (Englisch)
kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an "internal server error," which includes the username and password in an error message.
Reservieren
19.02.2013
Veröffentlichung
05.02.2014
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 8659 | KDE http.cpp m_request.url.url Information Disclosure | 200 | Proof-of-Concept | Offizieller Fix | CVE-2013-2074 |