Unscored CVE-2006-1211 EUVD-2006-1215GHSA-3j25-jp3q-7f47

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns data…

Published Mar 14, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.

References

netcool-neusecure-ns-unauth-access(25270) vdb-entry
20060308 Remote access to NeuSecure/Netcool backend database via web interface credentials leakage mailing-list