| Package | Affected versions | Patched versions |
|---|---|---|
| project server | = 2003 |
projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password for a SQL database via a GetInitializationData request, which includes the information in the UserName and Password tags of the response.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free