Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a cluster configuration file, which allows local users to obtain sensitive information by reading this file.
Weaknesses in this category are related to the management of credentials.
Link | Tags |
---|---|
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201460-1 | vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/56617 | vdb entry |