CVE-2012-2173

published 2012-06-20

CVE-2012-2173: The ODBC driver in IBM Security AppScan Source 7.x and 8.x before 8.6 sends an SHA-1 hash of the connection password during connections to a solidDB database…

medium 5 CVSS 3.1

AV N AC L Au N C P I N A N

The ODBC driver in IBM Security AppScan Source 7.x and 8.x before 8.6 sends an SHA-1 hash of the connection password during connections to a solidDB database, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
ibm	security_appscan_source	—	—
ibm	security_appscan_source	—	—
ibm	security_appscan_source	—	—
ibm	security_appscan_source	—	—
ibm	security_appscan_source	—	—
ibm	security_appscan_source	—	—

CWE-255