PT-2004-2517 · Sage · Saleslogix

Publicado 2004-10-18 · Atualizado 2017-07-11 · CVE-2004-1609

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SalesLogix version 6.1

Description The issue allows remote attackers to gain access by including usernames, passwords, and other sensitive information in the headers of an HTTP response.

Recommendations For SalesLogix version 6.1, consider restricting access to sensitive information in HTTP response headers until a patch is available. As a temporary workaround, review and modify the application's configuration to exclude sensitive data from response headers.

Exploit

Correção

Identificadores relacionados

CVE-2004-1609

Produtos afetados

Saleslogix

Referências · 8

• 🔥 http://securityfocus.com/bid/11450 · Exploit
• http://securitytracker.com/id?1011769 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1609 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=109811852218478&w=2 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html · Nota
• http://osvdb.org/10946 · Nota
• http://secunia.com/advisories/12883 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17753 · Nota