MEDIUM
IBM Net.Data allows remote attackers to obtain sensitive information such as path names, server names and possibly user names and passwords by causing the (1) $(DTW_CURRENT_FILENAME), (2) $(DATABASE), (3) $(LOGIN), (4) $(PASSWORD), and possibly other predefined variables that can be echoed back to the user via a web form
Published Nov 16, 2005
5.0
MEDIUMCVSS 2.0
EPSS 1.37%
Description
Affected products
Remediation
Metrics
References (3)
Change history (0)
No recorded changes yet.