VULHUB ™

Reportedly an issue exists in Microsoft Internet Explorer which could reveal a user's network share password in plain text. This is achievable when adding a new share through the Add Network Share Wizard. When attempting to connect to that share, appending '../', hitting enter, and entering '../' again to the address in the address bar, will reveal the path to the resource along with the password in plain text. It should be noted that this issue has been reported to exist whether the 'Save Password' option is selected or not, and has only been known to work when connecting to ftp targets.

Reportedly an issue exists in Microsoft Internet Explorer which could reveal a user's network share password in plain text. This is achievable when adding a new share through the Add Network Share Wizard. When attempting to connect to that share, appending '../', hitting enter, and entering '../' again to the address in the address bar, will reveal the path to the resource along with the password in plain text. It should be noted that this issue has been reported to exist whether the 'Save Password' option is selected or not, and has only been known to work when connecting to ftp targets.