Vulnetix
Try Vulnetix Request Demo
CVE-2003-0459 PUBLISHED CVSS 5 MEDIUM

KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.

EPSS 1.53% · 81.2th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
1.53%
81.2th percentile

Affected Products

VendorProductVersions
redhatkdebase3.0.3-13, 3.0.3-13
kdekonqueror_embedded0.1
redhatkdelibs_sound2.1.1-5, 2.2-11, 2.2-11
redhatanalog_real-time_synthesizer2.2-11, 2.2-11, 2.1.1-5
redhatkdelibs_devel2.2-11, 2.2-11, 3.0.3-8
redhatkdelibs2.1.1-5, 2.2-11, 2.2-11
kdekonqueror3.1.1, 3.0.3, 3.0.5
n/an/an/a
redhatkdelibs_sound_devel2.2-11, 2.2-11, 2.1.1-5

Timeline

References

Open in Interactive Console →