Vulnerability Details CVE-2006-1210
The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password in cleartext in body.phtml, which allows remote attackers to gain privileges by reading the source. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.9%
CVSS Severity
CVSS v2 Score 7.5
References
- http://www.securityfocus.com/archive/1/427155/100/0/threaded
- http://www.securityfocus.com/bid/17032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25270
- http://www.securityfocus.com/archive/1/427155/100/0/threaded
- http://www.securityfocus.com/bid/17032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25270
Products affected by CVE-2006-1210
-
cpe:2.3:a:micromuse:netcool_neusecure:3.0.236