Total vulnerabilities in the database
kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an "internal server error," which includes the username and password in an error message.
| Software | From | Fixed in |
|---|---|---|
| kde / kdelibs | 4.10.2 | 4.10.2.x |
| kde / kdelibs | 4.10.1 | 4.10.1.x |
| kde / kdelibs | - | 4.10.3.x |
| kde / kdelibs | 4.10.0 | 4.10.0.x |