CVE-2011-0410 | BDVDB-2026-44836 Detail

Description#

CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/70601
http://www.kb.cert.org/vuls/id/547167
http://osvdb.org/70602
http://secunia.com/advisories/43010
https://exchange.xforce.ibmcloud.com/vulnerabilities/64883

Exploit#

No public exploit known

History#

Version 12011-01-24Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.