You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jetspeed-user@portals.apache.org by "Berger, Jochen" <Jo...@t-systems.de> on 2001/07/09 09:59:52 UTC

SECURITY-Problem

Hi there,

there's a Security-Problem in the action SendConfirmationEmail

You can read the Password in clear Text because it is added to the Link with
.addPathInfo .

Greetings J.Berger

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org

RE: SECURITY-Problem

Posted by David Sean Taylor <da...@bluesunrise.com>.

Thanks Jochen,

I know about that one. I will add it to the buglist.
I will try to get a patch in later this week 

-------------------------------------
David Sean Taylor
taylor@apache.org
-------------------------------------
http://jakarta.apache.org/jetspeed
-------------------------------------
 

 

> -----Original Message-----
> From: Berger, Jochen [mailto:Jochen.Berger@t-systems.de]
> Sent: Monday, July 09, 2001 1:00 AM
> To: jetspeed-user@jakarta.apache.org
> Subject: SECURITY-Problem
> 
> 
> Hi there,
> 
> there's a Security-Problem in the action SendConfirmationEmail
> 
> You can read the Password in clear Text because it is added 
> to the Link with
> .addPathInfo .
> 
> Greetings J.Berger
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
> 
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org