2 matches found
SUSE CVE-2005-4849
Apache Derby before 10.1.2.1 exposes the 1 user and 2 password attributes in cleartext via a the RDBNAM parameter of the ACCSEC command and b the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensitive information...
5CVSS7.1AI score0.02451EPSS
SaveExploits0References3
CVE-2005-4849: Exposure of Sensitive Information to an Unauthorized Actor
Apache Derby before 10.1.2.1 exposes the 1 user and 2 password attributes in cleartext via a the RDBNAM parameter of the ACCSEC command and b the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensitive information...
5CVSS5.9AI score0.02451EPSS
SaveExploits0References2
20