Design/Logic Flaw

2017-10-0517:29:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875.

CPENameOperatorVersion
tivoli_storage_managereq6.3.6.100
tivoli_storage_managereq6.4.2
tivoli_storage_managereq7.1.0.1
tivoli_storage_managereq7.1.5
tivoli_storage_managereq6.4.2.100
tivoli_storage_managereq6.3
tivoli_storage_managereq6.1
tivoli_storage_managereq6.1.5.5
tivoli_storage_managereq6.3.5.1
tivoli_storage_managereq7.1.0.2

Name	Operator	Version
tivoli_storage_manager	eq	6.3.6.100
tivoli_storage_manager	eq	6.4.2
tivoli_storage_manager	eq	7.1.0.1
tivoli_storage_manager	eq	7.1.5
tivoli_storage_manager	eq	6.4.2.100
tivoli_storage_manager	eq	6.3
tivoli_storage_manager	eq	6.1
tivoli_storage_manager	eq	6.1.5.5
tivoli_storage_manager	eq	6.3.5.1
tivoli_storage_manager	eq	7.1.0.2