Design/Logic Flaw

2013-05-2714:55:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.4%

JSON

The Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 does not provide an encrypted session for transmitting login credentials, which allows remote attackers to obtain sensitive information by sniffing the network.

CPENameOperatorVersion
infosphere_optim_data_growth_for_oracle_e-business_suiteeq6.1
infosphere_optim_data_growth_for_oracle_e-business_suiteeq6.3.2
infosphere_optim_data_growth_for_oracle_e-business_suiteeq7.3.1
infosphere_optim_data_growth_for_oracle_e-business_suiteeq6.4.1
infosphere_optim_data_growth_for_oracle_e-business_suiteeq7.3.0
infosphere_optim_data_growth_for_oracle_e-business_suiteeq6.4.0
infosphere_optim_data_growth_for_oracle_e-business_suiteeq7.1.2
infosphere_optim_data_growth_for_oracle_e-business_suiteeq7.2.0
infosphere_optim_data_growth_for_oracle_e-business_suiteeq9.1.0
infosphere_optim_data_growth_for_oracle_e-business_suiteeq7.1.0

Name	Operator	Version
infosphere_optim_data_growth_for_oracle_e-business_suite	eq	6.1
infosphere_optim_data_growth_for_oracle_e-business_suite	eq	6.3.2
infosphere_optim_data_growth_for_oracle_e-business_suite	eq	7.3.1
infosphere_optim_data_growth_for_oracle_e-business_suite	eq	6.4.1
infosphere_optim_data_growth_for_oracle_e-business_suite	eq	7.3.0
infosphere_optim_data_growth_for_oracle_e-business_suite	eq	6.4.0
infosphere_optim_data_growth_for_oracle_e-business_suite	eq	7.1.2
infosphere_optim_data_growth_for_oracle_e-business_suite	eq	7.2.0
infosphere_optim_data_growth_for_oracle_e-business_suite	eq	9.1.0
infosphere_optim_data_growth_for_oracle_e-business_suite	eq	7.1.0