CVE Catalog

CVE-2010-3845

Critical
Published: Translated: NVD NIST

Summary

libapache-authenhook-perl version 2.00-04 stores usernames and passwords in plaintext in the vhost error log.

Risk Assessment

Storing credentials in plaintext increases the risk of exposure, potentially leading to unauthorized access to systems.

Recommendation

It is recommended to upgrade to a newer version that does not store credentials in plaintext in logs.

Original NVD description (English source)

libapache-authenhook-perl 2.00-04 stores usernames and passwords in plaintext in the vhost error log.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS