The Data Growth Solution for JD Edwards EnterpriseOne in IBM InfoSphere Optim 3.0 through 9.1 has hardcoded database credentials, which allows remote authenticated users to obtain sensitive information by reading an unspecified field in an XML document.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Infosphere_optim_data_growth_solution_for_siebel_crm | Ibm | 3.2 (including) | 3.2 (including) |
| Infosphere_optim_data_growth_solution_for_siebel_crm | Ibm | 3.2.1 (including) | 3.2.1 (including) |
| Infosphere_optim_data_growth_solution_for_siebel_crm | Ibm | 3.2.2 (including) | 3.2.2 (including) |
| Infosphere_optim_data_growth_solution_for_siebel_crm | Ibm | 3.2.3 (including) | 3.2.3 (including) |
| Infosphere_optim_data_growth_solution_for_siebel_crm | Ibm | 9.1 (including) | 9.1 (including) |