Design/Logic Flaw

2006-03-1401:06:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

JSON

The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password in cleartext in body.phtml, which allows remote attackers to gain privileges by reading the source. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.

CPENameOperatorVersion
netcool_neusecureeq3.0.236

CPE	Name	Operator	Version
	netcool_neusecure	eq	3.0.236

References

www.securityfocus.com/archive/1/427155/100/0/threaded

www.securityfocus.com/bid/17032

exchange.xforce.ibmcloud.com/vulnerabilities/25270