| Package | Affected versions | Patched versions |
|---|---|---|
| scrumworks | = 1.8.4 |
CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free