Thanks Jochen,

I know about that one. I will add it to the buglist.
I will try to get a patch in later this week 

-------------------------------------
David Sean Taylor
[EMAIL PROTECTED]
-------------------------------------
http://jakarta.apache.org/jetspeed
-------------------------------------
 

 

> -----Original Message-----
> From: Berger, Jochen [mailto:[EMAIL PROTECTED]]
> Sent: Monday, July 09, 2001 1:00 AM
> To: [EMAIL PROTECTED]
> Subject: SECURITY-Problem
> 
> 
> Hi there,
> 
> there's a Security-Problem in the action SendConfirmationEmail
> 
> You can read the Password in clear Text because it is added 
> to the Link with
> .addPathInfo .
> 
> Greetings J.Berger
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to