MS Project Server Security Flaw

From: Curt Collins (ccollins@hmgusa.com)
Date: 12/04/02


From: "Curt Collins" <ccollins@hmgusa.com>
Date: Wed, 4 Dec 2002 12:57:35 -0800


While I still haven't figured out the particular cause,
Project 2002 Server seems to be posting valid SQL Server
login credentials to the server's Application Log within
an XML string. I suspect this is a security flaw. If
anyone knows the cause of the Project error, that would be
greatly appreciated.