Description
The system stores the username and password from the login form after submitting the request. This could allow an attacker with access to the platform to return to the browser and view the login credentials.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Redmine Redmine
Default version status: unaffected
0 to < 6.0.7affected0 to < 5.1.10affected0 to < 5.0.14affected6.0.7unaffected5.1.10unaffected5.0.14unaffected