Vulnerabilities > CVE-2006-0838 - Unspecified vulnerability in Micromuse Netcool Neusecure 3.0.236

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
micromuse
NVD
Published: 2006-02-22
Updated: 2024-11-21

Summary

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the (1) CMS_DBPASS, (2) CMSM_DBPASS, and (3) RPT_DBPASS fields in /etc/neusecure.conf, and in (4) /opt/NeuSecure/bin/ns_archiver.log, which allows local users to gain privileges. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.

Vulnerable Configurations

Part Description Count
Application
Micromuse
1

References