Lucene search

[email protected]CVE-2016-8916

HistoryMay 05, 2017 - 7:29 p.m.

CVE-2016-8916

2017-05-0519:29:00

CWE-200

[email protected]

web.nvd.nist.gov

ibm

tivoli

storage manager

password

vulnerability

nvd

cve-2016-8916

ibm x-force id

log file

local user

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is issued. IBM X-Force ID: 118472.

CPENameOperatorVersion
ibm:tivoli_storage_manageribm tivoli storage managereq6.4.2
ibm:tivoli_storage_manageribm tivoli storage managereq7.1.0.1
ibm:tivoli_storage_manageribm tivoli storage managereq7.1.5
ibm:tivoli_storage_manageribm tivoli storage managereq6.4.2.100
ibm:tivoli_storage_manageribm tivoli storage managereq7.1.0.2
ibm:tivoli_storage_manageribm tivoli storage managereq7.1.6.4
ibm:tivoli_storage_manageribm tivoli storage managereq6.4.2.500
ibm:tivoli_storage_manageribm tivoli storage managereq6.4.3.1
ibm:tivoli_storage_manageribm tivoli storage managereq7.1.3.1
ibm:tivoli_storage_manageribm tivoli storage managereq6.4.3

CPE	Name	Operator	Version
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	6.4.2
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	7.1.0.1
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	7.1.5
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	6.4.2.100
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	7.1.0.2
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	7.1.6.4
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	6.4.2.500
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	6.4.3.1
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	7.1.3.1
ibm:tivoli_storage_manager	ibm tivoli storage manager	eq	6.4.3

Rows per page:

1-10 of 361

References

www.ibm.com/support/docview.wss?uid=swg21998166

www.securityfocus.com/bid/98335

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2016-8916

openvas2 nessus1 ibm1 prion1 cvelist1