Vulnerability in Sun Cluster

CVE-2003-1588

Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a cluster configuration file, which allows local users to obtain sensitive information by reading this file.

EPSS: 0.003 (19.4th percentile) — read the EPSS interpretation.

Affected products

Sun Cluster — versions 2.2
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

cve@mitre.org (vendor-advisory, x_refsource_SUNALERT, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)