EUVD-2012-2589

Malware in sbrugna...

CVE-2012-2603

The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information via a modified desktop client...

Design/Logic Flaw

The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information via a modified desktop client...

CVE-2012-2603

The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information via a modified desktop client...

CVE-2012-2603

The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information via a modified desktop client...

CVE-2012-2603

CVE-2012-2603 affects CollabNet ScrumWorks Pro prior to 6.0. The vulnerability allows remote authenticated users to escalate privileges and access sensitive information by using a modified desktop client; exploitation relies on recompiling the client to bypass normal privilege checks. CollabNet s...

PT-2012-4129

Name of the Vulnerable Software and Affected Versions CollabNet ScrumWorks Pro versions prior to 6.0 Description The issue allows remote authenticated users to gain privileges and obtain sensitive information by utilizing a modified desktop client. Recommendations For versions prior to 6.0, updat...

CVE-2012-2603: Undefined Security Weakness

The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information via a modified desktop client...

CVE-2011-0410

CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by 1 sniffing the network for transmissions of Java objects or 2 reading the database...

Design/Logic Flaw

CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by 1 sniffing the network for transmissions of Java objects or 2 reading the database...

CVE-2011-0410

CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by 1 sniffing the network for transmissions of Java objects or 2 reading the database...

PT-2011-2330

Name of the Vulnerable Software and Affected Versions CollabNet ScrumWorks Basic version 1.8.4 Description The issue allows context-dependent attackers to obtain sensitive information. This can be achieved by either sniffing the network for transmissions of Java objects or reading the database, a...

CVE-2011-0410: Undefined Security Weakness

CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by 1 sniffing the network for transmissions of Java objects or 2 reading the database...