CVE-2005-4849

Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensitive information.
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:derby:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2005-12-31 05:00

Updated : 2023-12-10 10:28


NVD link : CVE-2005-4849

Mitre link : CVE-2005-4849

CVE.ORG link : CVE-2005-4849


JSON object : View

Products Affected

apache

  • derby
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor