CVE-2017-9278 — Avoid password disclosure via EBS event logging in the iManager Oracle driver

CVE-2017-9278

Avoid password disclosure via EBS event logging in the iManager Oracle driver PUBLISHED

Description (CNA)

The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables.

Affected (CNA)

Vendor / product	Versions
NetIQ / Identity Manager Oracle EBS driver	affected unspecified before 4.0.2.0

CWE

CWE-532

References

https://download.novell.com/Download?buildid=DKFkx_xPeaw~
https://bugzilla.suse.com/show_bug.cgi?id=1053200

ADP enrichment

CVE

No English description supplied.

https://download.novell.com/Download?buildid=DKFkx_xPeaw~
https://bugzilla.suse.com/show_bug.cgi?id=1053200