CVE-2017-14941 | BDVDB-2026-91086 Detail

Description#

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/binary1985/VulnerabilityDisclosure/blob/master/JasperSoft%20JasperReports%20-%204.7%20-%20CVE-2017-14941

Exploit#

No public exploit known

History#

Version 12017-10-01Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.