Vulnerabilities > CVE-2006-0837 - Unspecified vulnerability in Micromuse Netcool Neusecure 3.0.236

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
micromuse
NVD
Published: 2006-02-22
Updated: 2018-10-18

Summary

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 has world-readable permissions for (1) /etc/neusecure.conf, (2) /opt/NeuSecure/etc/cms-3.0.236.buildconf, and (3) /opt/NeuSecure/bin/ns_archiver.log, which allows local users to read sensitive information such as passwords. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.

Vulnerable Configurations

Part Description Count
Application
Micromuse
1

References