webauth prior to 4.6.1 has authentication credential disclosure
stanford webauth
debian debian linux 8.0
debian debian linux 9.0
debian debian linux 10.0