Auth bypass in Ibm Netezza

CVE-2012-5940

The WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza, when SSL is not enabled, allows remote attackers to discover credentials by sniffing the network during the authentication process.

Vulnerability class: Broken Authentication

EPSS: 0.011 (62.9th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Netezza — versions 6.0.5, 6.0.8, 7.0
  • N/a — versions n/a

Weakness classification (CWE)

References