CVE-2005-2076: HP Version Control Repository Manager

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the "@" character in a proxy password, which could allow attackers with physical access to obtain portions of the password when it is displayed to the screen.

Affected products

• HP Version Control Repository Manager: version 1.0.1288.1 only; version 1.0.2241.0 only; version 1.0.2289.0 only; version 1.0.2345.0 only; version 1.0.3085.0 only; version 1.0.3086.0 only; …

Published 2005-06-29. Last modified 2026-06-16.