Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Link | Tags |
---|---|
https://www.securityfocus.com/archive/1/525003 | vdb entry third party advisory |