Unscored CVE-2006-1210 EUVD-2006-1214GHSA-qx23-p4v5-5xrm

The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password in cleartext in body…

Published Mar 14, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password in cleartext in body.phtml, which allows remote attackers to gain privileges by reading the source. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.

References

netcool-neusecure-ns-unauth-access(25270) vdb-entry
17032 vdb-entry
20060308 Remote access to NeuSecure/Netcool backend database via web interface credentials leakage mailing-list