Lucene search
MitreCVELIST:CVE-2005-4849HistoryOct 03, 2022 - 4:22 p.m.
CVE-2005-4849
2022-10-0316:22:45
mitre
www.cve.org
apache derby
cleartext exposure
user and password
sensitive information
accsec command
databasemetadata.geturl
Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensitive information.
Related
veracode
veracode
Information Disclosure
2018-11-14 03:10:42
github
github
Apache Derby exposes user and password attributes
2022-05-01 02:31:27
cve
cve
CVE-2005-4849
2022-10-03 16:22:45
debiancve
debiancve
CVE-2005-4849
2022-10-03 16:22:45
osv
osv
Apache Derby exposes user and password attributes
2022-05-01 02:31:27
nvd
nvd
CVE-2005-4849
2005-12-31 05:00:00