Description
The Data Growth Solution for JD Edwards EnterpriseOne in IBM InfoSphere Optim 3.0 through 9.1 has hardcoded database credentials, which allows remote authenticated users to obtain sensitive information by reading an unspecified field in an XML document.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/87639
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21680575
Scores
EPSS
0.0132
EPSS Percentile
67.8%
Details
CWE
CWE-255
Status
published
Products (5)
ibm/infosphere_optim_data_growth_solution_for_siebel_crm
3.2
ibm/infosphere_optim_data_growth_solution_for_siebel_crm
3.2.1
ibm/infosphere_optim_data_growth_solution_for_siebel_crm
3.2.2
ibm/infosphere_optim_data_growth_solution_for_siebel_crm
3.2.3
ibm/infosphere_optim_data_growth_solution_for_siebel_crm
9.1
Published
Aug 12, 2014
Tracked Since
Feb 18, 2026