CVE-2008-4165

MEDIUM 4.0CVE-2008-4165 · Published 22/09/2008 · updated 16/06/2026

In short

CVE-2008-4165 is a MEDIUM (CVSS 4.0) vulnerability affecting kolab groupware server (kolab).
Chance of exploitation in the next 30 days (EPSS): 0.97%, higher than 62.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
kolab groupware server kolab	`= 1.0.0`	No fix yet

Description

admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the ssl_access_log file or the referer string.

References

mandriva.com/en/security/advisories
securityfocus.com/bid/31165 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/45124
qa.mandriva.com/show_bug.cgi

More vulnerabilities in kolab groupware server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free