CVE-2011-0410: Medium severity collabnet scrumworks vulnerability
CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0410?
CVE-2011-0410 is considered a high severity vulnerability due to its potential to expose sensitive credentials.
How do I fix CVE-2011-0410?
To fix CVE-2011-0410, it is recommended to configure the application to use encrypted communication channels for all network transmissions.
What types of attacks can exploit CVE-2011-0410?
CVE-2011-0410 can be exploited by attackers through network sniffing or direct access to the database to capture cleartext credentials.
What versions are affected by CVE-2011-0410?
CVE-2011-0410 specifically affects CollabNet ScrumWorks Basic version 1.8.4.
Is sensitive data at risk due to CVE-2011-0410?
Yes, CVE-2011-0410 puts sensitive data at risk since it allows attackers to obtain cleartext credentials used for network communication.