漏洞标题
N/A
漏洞描述信息
IBM Tivoli Micromuse Netcool/ NeuSecure 3.0.236具有可 world 读取权限的 (1) /etc/neusecure.conf, (2) /opt/NeuSecure/etc/cms-3.0.236.buildconf 和 (3) /opt/NeuSecure/bin/ns_archiver.log,这允许本地用户读取敏感信息(如密码)。注意:IBM已私下向 CVE 确认这些漏洞有一个修复可用。
CVSS信息
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 has world-readable permissions for (1) /etc/neusecure.conf, (2) /opt/NeuSecure/etc/cms-3.0.236.buildconf, and (3) /opt/NeuSecure/bin/ns_archiver.log, which allows local users to read sensitive information such as passwords. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Micromuse Netcool/Neusecure NS帐户密码泄露漏洞
漏洞描述信息
IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236的(1) /etc/neusecure.conf、(2) /opt/NeuSecure/etc/cms-3.0.236.buildconf和(3) /opt/NeuSecure/bin/ns_archiver.log具有全域可读的权限,可使本地用户读取敏感信息,如密码。
CVSS信息
N/A
漏洞类别
授权问题