Export limit exceeded: 21746 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2012-3431

Teiid: JDBC socket does not encrypt client login messages by default

The Teiid Java Database Connectivity (JDBC) socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specification, which allows remote attackers to obtain login credentials via a man-in-the-middle (MITM) attack.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat
Products
Jboss Enterprise Data Services Jboss Enterprise Data Services Platform