Описание
The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 8.2 (включая)
Одно из
cpe:2.3:a:ibm:infosphere_guardium:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_guardium:8.00:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_guardium:8.01:*:*:*:*:*:*:*
EPSS
Процентиль: 57%
0.00349
Низкий
5 Medium
CVSS2
Дефекты
CWE-310
Связанные уязвимости
github
больше 3 лет назад
The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
EPSS
Процентиль: 57%
0.00349
Низкий
5 Medium
CVSS2
Дефекты
CWE-310