|CVSS SCORE||7.1, (AV:N/AC:M/Au:N/C:C/I:N/A:N)|
System Networking Switch Center
The specific flaw exists within the IBM SNSC DB Service, that listens by default on port 40999. This service allows an unauthenticated user to obtain the account details for the SNSC Administrator, including the password. The password is stored using reversible encryption, and both the key and salt are static. An attacker can use this information to obtain the plaintext password for the SNSC Administrator or any other known account.
IBM has issued an update to correct this vulnerability. More details can be found at: