CVE-2011-0410

Published Jan 24, 2011 CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Description
CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-0436 CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
certcc
Published
Updated
Aug 6, 2024, 9:51 PM
Reserved
Jan 11, 2011, 12:00 AM
Status
Modified
Published
Jan 24, 2011, 6:00 PM
Modified
Jun 16, 2026, 11:27 PM