CVE-2011-0410

Published Jan 24, 2011 CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Description
CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-0436 CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
certcc
Published
Updated
Aug 6, 2024, 9:51 PM
Reserved
Jan 11, 2011, 12:00 AM
Status
Modified
Published
Jan 24, 2011, 6:00 PM
Modified
Jun 16, 2026, 11:27 PM