QwikSec

Security Database

CVE

CWE

Training

CVE-2006-1211

Published: Mar 14, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

netcool-neusecure-ns-unauth-access(25270)

vdb-entry

x_refsource_XF

20060308 Remote access to NeuSecure/Netcool backend database via web interface credentials leakage

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.