← Database

CVE-2005-4862

MEDIUM CVSS: 5.0 Published: 2005-12-31 Modified: 2026-06-16

Description

The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sensitive information via a search string that matches a password.

Affected Platforms

Xwiki Xwiki

Weakness Type

CWE-255

References