CVE-2005-4849

MEDIUM · CVSS 5 EPSS 2.45%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-12-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2005-4849

Severity

MEDIUM

CVSS

EPSS

2.45%

Apache

Original Filing — NVD Description

Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensitive information.