Description
SeleniumServer FTP Server 1.0, and possibly earlier, stores user passwords in plaintext in the Servers directory, which allows attackers to obtain passwords by reading the file. NOTE: the provenance of this information is unknown; details are obtained from third party sources.
References
- 30449 vdb-entry
- selenium-server-plaintext-password(30334) vdb-entry
- 22928 third-party-advisory
- ADV-2006-4540 vdb-entry