CVE-2010-3845

libapache-authenhook-perl 2.00-04 stores usernames and passwords in plaintext in the vhost error log.

Score

CVSS 3.0 9.8 Critical

Status

Modified - secalert@redhat.com

Published

2017-08-08

Last modified

2024-08-07

Weaknesses

CWE-200

Affected products

• Apache Authenhook (Apache Authenhook Project)

References

• http://seclists.org/oss-sec/2010/q4/63
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=599712
• https://rt.cpan.org/Public/Bug/Display.html?id=62040