VULNERABILITY INTELLIGENCE

CVE-2006-0838

CVSS score2.1 LOW

EPSS probability0.37%

CISA KEVNot currently listed

Published2006-02-22

Last modified2026-06-16

Description

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the (1) CMS_DBPASS, (2) CMSM_DBPASS, and (3) RPT_DBPASS fields in /etc/neusecure.conf, and in (4) /opt/NeuSecure/bin/ns_archiver.log, which allows local users to gain privileges. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.