KDE-Libs could be made to expose web credentials.
It was discovered that KIO would sometimes display web authentication credentials under certain error conditions. If a user were tricked into opening a specially crafted web page, an attacker could potentially exploit this to expose confidential information.
29 May 2013
A security issue affects these releases of Ubuntu and its derivatives:
KDE-Libs could be made to expose web credentials.
It was discovered that KIO would sometimes display web authentication credentials under certain error conditions. If a user were tricked into opening a specially crafted web page, an attacker could potentially exploit this to expose confidential information.
The problem can be corrected by updating your system to the following package versions:
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
After a standard system update you need to restart any applications that use KIO from KDE-Libs, such as Konqueror, to make all the necessary changes.
Vulmon