Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allows remote attackers to obtain sensitive information.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ariba_spend_management_solutions | Ariba | * | * |