VULNERABILITY INTELLIGENCE
CVE-2017-9278
CVSS score3.3 LOW
EPSS probability0.91%
CISA KEVNot currently listed
Published2018-03-02
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables.
Weakness classification
- CWE-532: Insertion of Sensitive Information into Log File