CVE-2011-0410 CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information b...
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| collabnet scrumworks | = 1.8.4-basic | No fix listed |
References
- 70601 vdb-entry
- 70602 vdb-entry
- 43010 third-party-advisory vendor-advisory
- VU#547167 third-party-advisory us-government-resource
- scrumworks-base64-info-disclosure(64883) vdb-entry