PT-2004-2517 · Sage · Saleslogix

Published 2004-10-18 · Updated 2017-07-11 · CVE-2004-1609

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SalesLogix version 6.1

Description The issue allows remote attackers to gain access by including usernames, passwords, and other sensitive information in the headers of an HTTP response.

Recommendations For SalesLogix version 6.1, consider restricting access to sensitive information in HTTP response headers until a patch is available. As a temporary workaround, review and modify the application's configuration to exclude sensitive data from response headers.

Exploit

Fix

Related Identifiers

CVE-2004-1609

Affected Products

Saleslogix

References · 8

• 🔥 http://securityfocus.com/bid/11450 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1609 · Security Note
• http://secunia.com/advisories/12883 · Vendor Advisory
• http://securitytracker.com/id?1011769 · Note
• http://marc.info/?l=bugtraq&m=109811852218478&w=2 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html · Note
• http://osvdb.org/10946 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17753 · Note