ODBC Driver Vulnerability in IBM Security AppScan Source Affects SolidDB Database Connections

CVE-2012-2173

Summary

The ODBC driver in IBM Security AppScan Source versions 7.x and 8.x prior to 8.6 is susceptible to a security weakness that compromises the confidentiality of sensitive connection information. Specifically, during the establishment of a connection to a SolidDB database, the driver transmits the SHA-1 hash of the database connection password. This practice can potentially allow remote attackers to intercept the hash over the network, enabling them to launch further attacks to retrieve the original password and gain unauthorized access to the database.

References