Design/Logic Flaw

2011-01-2418:00:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.5%

JSON

CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database.

CPENameOperatorVersion
scrumworkseq1.8.4 basic

CPE	Name	Operator	Version
	scrumworks	eq	1.8.4 basic

References

osvdb.org/70601

osvdb.org/70602

secunia.com/advisories/43010

www.kb.cert.org/vuls/id/547167

exchange.xforce.ibmcloud.com/vulnerabilities/64883