CVE-2006-6617: Microsoft Project Server

Medium severity, CVSS 6.5. EPSS: 20.4% chance of exploitation in the next 30 days.

projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password for a SQL database via a GetInitializationData request, which includes the information in the UserName and Password tags of the response.

Affected products

• Microsoft Project Server: version 2003 only

Published 2006-12-18. Last modified 2026-06-16.