5
CVE-2003-0459
- EPSS 1.53%
- Published 27.08.2003 04:00:00
- Last modified 03.04.2025 01:03:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.
Data is provided by the National Vulnerability Database (NVD)
Kde ≫ Konqueror Embedded Version0.1
Redhat ≫ Analog Real-time Synthesizer Version2.1.1-5 Editioni386
Redhat ≫ Analog Real-time Synthesizer Version2.2-11 Editioni386
Redhat ≫ Analog Real-time Synthesizer Version2.2-11 Editionia64
Redhat ≫ Kdelibs Devel Version2.1.1-5 Editioni386_dev
Redhat ≫ Kdelibs Devel Version2.2-11 Editioni386_dev
Redhat ≫ Kdelibs Devel Version2.2-11 Editionia64_dev
Redhat ≫ Kdelibs Devel Version3.0.0-10 Editioni386_dev
Redhat ≫ Kdelibs Devel Version3.0.3-8 Editioni386_dev
Redhat ≫ Kdelibs Devel Version3.1-10 Editioni386_dev
Redhat ≫ Kdelibs Sound Version2.1.1-5 Editioni386_sound
Redhat ≫ Kdelibs Sound Version2.2-11 Editioni386_sound
Redhat ≫ Kdelibs Sound Version2.2-11 Editionia64_sound
Redhat ≫ Kdelibs Sound Devel Version2.1.1-5 Editioni386_sound_dev
Redhat ≫ Kdelibs Sound Devel Version2.2-11 Editioni386_sound_dev
Redhat ≫ Kdelibs Sound Devel Version2.2-11 Editionia64_sound_dev
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.53% | 0.797 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|