Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
1.2

TIBCO RendezVous logs expose usernames and passwords

CVE-2006-4676 · published 20 years ago
Summary

Versions 7.4.11 and earlier of TIBCO RendezVous write base64‑encoded usernames and passwords to the rvrd.db log file. Anyone with local access to that file can decode it and see the credentials, risking unauthorized access to the system. Update to a newer version or remove the log file and restrict local access to prevent exposure.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
tibco rendezvous <= 7.4.11
cpe:2.3:a:tibco:rendezvous:*:*:*:*:*:*:*:*
Original advisory text
TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive information by decoding the log file.
TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive information by decoding the log file.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
1.2 Low
Exploitation
<1% chance of attack within 30 days
Timeline
Published11 Sep 2006
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2006-4676 · NVD
Track software like this
Free during beta