Vulnerabilities

TI-2006-01170 CVE-2006-1211 · GHSA-3j25-jp3q-7f47

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow…

LOW 36

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure appli…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01435 Published 2006-03-14 No fix listed

TI-2006-01169 CVE-2006-1210 · GHSA-qx23-p4v5-5xrm

The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL…

LOW 36

The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password in cleartext in body.phtml, which allows remote attackers to gain privileges by reading the source.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01572 Published 2006-03-14 No fix listed

TI-2006-00816 CVE-2006-0838 · GHSA-7x5m-5m89-xqf8

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the (1)…

LOW 11

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the (1) CMS_DBPASS, (2) CMSM_DBPASS, and (3) RPT_DBPASS fields in /etc/neusecure.conf, and in (4) /opt/NeuSecure/bin/ns_archiver.log, which all…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00372 Published 2006-02-22 No fix listed

TI-2006-00815 CVE-2006-0837 · GHSA-pgxf-mp37-9rpp

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 has world-readable permissions for (1)…