CVE-2005-2845 Information

Description

Ariba Spend Management System sends the username and password to the server in plaintext in a POST request which allows remote attackers to obtain sensitive information.

Reference

http://marc.info/?l=bugtraq&m=112552683829473&w=2 http://marc.info/?l=bugtraq&m=112559982413287&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/22116 ariba-url-plaintext-password(22116)