Unscored CVE-2005-2845 EUVD-2005-2846GHSA-grpx-6vv2-cqxv

Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allows remote attackers t…

Published Sep 8, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allows remote attackers to obtain sensitive information.

References

20050901 Re: Ariba password exposure vulnerability mailing-list
20050831 Ariba password exposure vulnerability mailing-list
ariba-url-plaintext-password(22116) vdb-entry