Security Advisory
CVE-2010-5092
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows local users to obtain sensitive information by reading a database.