Vulnerabilities > CVE-2006-0838 - Unspecified vulnerability in Micromuse Netcool Neusecure 3.0.236

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
micromuse
NVD
Published: 2006-02-22
Updated: 2018-10-18

Summary

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the (1) CMS_DBPASS, (2) CMSM_DBPASS, and (3) RPT_DBPASS fields in /etc/neusecure.conf, and in (4) /opt/NeuSecure/bin/ns_archiver.log, which allows local users to gain privileges. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.

Vulnerable Configurations

Part Description Count
Application
Micromuse
1

References