Vulnerability Details CVE-2011-0410
CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://osvdb.org/70601
- http://osvdb.org/70602
- http://secunia.com/advisories/43010
- http://www.kb.cert.org/vuls/id/547167
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64883
- http://osvdb.org/70601
- http://osvdb.org/70602
- http://secunia.com/advisories/43010
- http://www.kb.cert.org/vuls/id/547167
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64883
Products affected by CVE-2011-0410
-
cpe:2.3:a:collabnet:scrumworks:1.8.4