CVE-2011-0410 — CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database

Back Back to CVE browser

MEDIUM

CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database

Published Jan 24, 2011

5.0

MEDIUM

CVSS 2.0

EPSS 1.92%

Description

CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.92% 0.01921

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01921

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.92% (0.01921)	79.17th	v5 (v2026.06.15)
Jun 15, 2026	1.92% (0.01921)	77.18th	v5 (v2026.06.15)
Mar 17, 2025	0.60% (0.00595)	67.44th	v4 (v2025.03.14)
Dec 12, 2024	0.20% (0.00203)	59.22th	v3 (v2023.03.01)
Jun 14, 2024	0.20% (0.00203)	58.49th	v3 (v2023.03.01)
Mar 7, 2023	0.20% (0.00203)	56.48th	v3 (v2023.03.01)
Mar 6, 2023	1.02% (0.01018)	40.69th	v2 (v2022.01.01)
Sep 10, 2022	1.02% (0.01018)	38.88th	v2 (v2022.01.01)
Apr 1, 2022	1.02% (0.01018)	36.86th	v2 (v2022.01.01)
Feb 4, 2022	1.02% (0.01018)	19.50th	v2 (v2022.01.01)

Weaknesses (1)

CWE-310

References (5)

http://osvdb.org/70601
vdb-entryx_refsource_OSVDB
http://osvdb.org/70602
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/43010
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.kb.cert.org/vuls/id/547167
third-party-advisoryx_refsource_CERT-VNUS Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/64883
vdb-entryx_refsource_XF

Link	Providers	Tags
http://osvdb.org/70601		vdb-entryx_refsource_OSVDB
http://osvdb.org/70602		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/43010		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.kb.cert.org/vuls/id/547167		third-party-advisoryx_refsource_CERT-VNUS Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/64883		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner certcc

Published Jan 24, 2011

Updated Aug 6, 2024

Reserved Jan 11, 2011

Link CVE-2011-0410

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2011-0410

Red Hat

Severity n/a

Public date n/a

Links CVE-2011-0410