CVE-2005-2845

Description

Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allows remote attackers to obtain sensitive information.

Affected products

• ariba / ariba_spend_management_solutions

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=112559982413287&w=2
• MAILING_LISThttp://marc.info/?l=bugtraq&m=112552683829473&w=2
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/22116