CVE-2012-5940 The WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza, when SSL is not enabled, allows remote attackers to discover credentials by sniffing the network during the authentication proc...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza, when SSL is not enabled, allows remote attackers to discover credentials by sniffing the network during the authentication process.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm netezza | = 6.0.5 | No fix listed |
| ibm netezza | = 6.0.8 | No fix listed |
| ibm netezza | = 7.0 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- netezza-insecure-login(80535) vdb-entry