CVE-2008-3003

Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save…

published August 12, 2008

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the "Excel Credential Caching Vulnerability."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01671 · 76.6th percentile
Published
2008-08-12T23:00Z
EPSS history
Timeline
  • 12 AUG 23:00Z
    Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save…
    cvelistv5