CVE-2023-39379

2023-08-0409:43:32

jpcert

www.cve.org

fujitsu

ism

sensitive data

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.2%

JSON

Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product’s maintenance data (ismsnap) in cleartext form. As a result, the password for the proxy server that is configured in ISM may be retrieved. Affected products and versions are as follows: Fujitsu Software Infrastructure Manager Advanced Edition V2.8.0.060, Fujitsu Software Infrastructure Manager Advanced Edition for PRIMEFLEX V2.8.0.060, and Fujitsu Software Infrastructure Manager Essential Edition V2.8.0.060.

CNA Affected

[
  {
    "vendor": "Fujitsu Limited",
    "product": "Fujitsu Software Infrastructure Manager Advanced Edition",
    "versions": [
      {
        "version": "V2.8.0.060",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Fujitsu Software Infrastructure Manager Advanced Edition for PRIMEFLEX",
    "versions": [
      {
        "version": "V2.8.0.060",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fujitsu Limited",
    "product": "Fujitsu Software Infrastructure Manager Essential Edition",
    "versions": [
      {
        "version": "V2.8.0.060",
        "status": "affected"
      }
    ]
  }
]