Security Advisory

CVE-2005-4849

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-07-05 20:00:00

Last updated 2024-09-16 23:56:48

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensitive information.

← Browse all CVEs View on cve.org ↗