CVE-2017-14941

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source…

published October 1, 2017

CVSS
—
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01039 · 63.4th percentile
Published
2017-10-01T03:00Z
EPSS history
Timeline
  • 01 OCT 03:00Z
    Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source…
    cvelistv5