CVE-2018-20243 — n/a / Apache Fineract

CVE-2018-20243

n/a / Apache Fineract PUBLISHED

Description (CNA)

The implementation of POST with the username and password in the URL parameters exposed the credentials. More infomration is available in fineract jira issues 726 and 629.

Affected (CNA)

Vendor / product	Versions
n/a / Apache Fineract	affected 0.4.0-incubating, 0.5.0-incubating, 0.6.0-incubating, 1.0.0, 1.1.0, 1.2.0, 1.3.0

CWE

No CWE identifiers supplied.

References

https://lists.apache.org/thread.html/r040d46835aff3c192656b549ca82f62d87fb044ef9a9dd49408b49b4%40%3Cdev.fineract.apache.org%3E

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread.html/r040d46835aff3c192656b549ca82f62d87fb044ef9a9dd49408b49b4%40%3Cdev.fineract.apache.org%3E