Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3j25-jp3q-7f47

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.

EPSS

Процентиль: 54%
0.00311
Низкий

Связанные уязвимости

nvd
почти 20 лет назад

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.

EPSS

Процентиль: 54%
0.00311
Низкий