webauth before 4.6.1 has authentication credential disclosureReferenceshttps://security-tracker.debian.org/tracker/CVE-2013-2106https://access.redhat.com/security/cve/cve-2013-2106http://www.openwall.com/lists/oss-security/2013/05/18/6
