Lucene search
K

jdedwards.app.passwd.txt

🗓️ 17 Aug 1999 00:00:00Reported by Packet StormType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 16 Views

JDEdwards application passwords are hardcoded in config files, risking security breaches.

Code
`Date: Mon, 3 May 1999 15:09:11 -0400  
From: "Stout, Bill" <[email protected]>  
To: [email protected]  
Subject: JDEdwards application passwords  
  
  
Anyone have experience with JDEdwards applications(WorldVision/OneWorld)?  
  
The user JDE password JDE is written into multiple places in config files,  
and is typically installed with SECOFR priviledges for AS/400s (DB2), or  
admin priviledges in NT/UNIX Oracle/SQLserver databases. Changing the  
password for user JDE breaks the application, since the password is coded  
into multiple places, possibly compiled. I've been told that it's not  
trivial to tighten this properly, and typically is not done.  
  
I can't believe this can't be configured securely. Any experience with  
this?  
  
Bill Stout  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation