CVE-2006-0838 Hardcoded credentials in n/a
Local attackers can read cleartext database passwords from configuration and log files to gain elevated privileges on IBM Tivoli NeuSecure systems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-0838?
CVE-2006-0838 is a low-severity vulnerability in n/a, published on 22 Feb 2006. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the (1) CMS_DBPASS, (2) CMSM_DBPASS, and (3) RPT_DBPASS fields in /etc/neusecure.conf, and in (4) /opt/NeuSecure/bin/ns_archiver.log, which allows local users to gain privileges. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.
Which versions are affected by CVE-2006-0838?
It affects 1 product.
Products include Micromuse Netcool Neusecure.
How do I fix CVE-2006-0838?
No fix has been published for CVE-2006-0838 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-0838 being exploited?
There is no known exploitation of CVE-2006-0838 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-7x5m-5m89-xqf8.