PT-2012-4644
CVE-2012-3312
·
Publicado
2012-08-29
·
Atualizado
2017-08-29
Descrição por
CVSS 2.0
5.0
MédiaMétricasAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM InfoSphere Guardium versions 8.2 and earlier
Description
The issue concerns the transmission of cleartext database credentials over the network when the save-password setting is enabled in the datasource definition editor. This allows remote attackers to obtain sensitive information by sniffing the network.
Recommendations
For IBM InfoSphere Guardium versions 8.2 and earlier, disable the save-password setting in the datasource definition editor to prevent the transmission of cleartext database credentials.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾