high7.5
CVE-2006-1210
The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password in cleartext in body.phtml, which allows…
Impact
The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password in cleartext in body.phtml, which allows remote attackers to gain privileges by reading the source. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Micromuse | Netcool Neusecure | Version 3.0.236 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/427155/100/0/threaded
- http://www.securityfocus.com/bid/17032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25270
- http://www.securityfocus.com/archive/1/427155/100/0/threaded
- http://www.securityfocus.com/bid/17032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25270