Lucene search

PRIOn knowledge basePRION:CVE-2014-8923

HistoryMar 25, 2015 - 1:59 a.m.

Design/Logic Flaw

2015-03-2501:59:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

Low

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.4%

JSON

The (1) IBM Tivoli Identity Manager Active Directory adapter before 5.1.24 and (2) IBM Security Identity Manager Active Directory adapter before 6.0.14 for IBM Security Identity Manager on Windows, when certain log and trace levels are configured, store the cleartext administrator password in a log file, which allows local users to obtain sensitive information by reading a file.

CPENameOperatorVersion
security_identity_manager_active_directory_adapterle6.0.14
tivoli_identity_manager_active_directory_adapterle5.1.20

CPE	Name	Operator	Version
	security_identity_manager_active_directory_adapter	le	6.0.14
	tivoli_identity_manager_active_directory_adapter	le	5.1.20

References

www-01.ibm.com/support/docview.wss?uid=swg21699902

6.1 Medium

AI Score

Confidence

Low

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.4%

JSON

Related for PRION:CVE-2014-8923