Security Bulletin: IBM SONAS Administrator password can be read by the root user from the shell command history (CVE-2014-3045)

Summary A fix is available for IBM SONAS, for the security issue that after changing password of administrative user, the password can be read by the root user from the shell command history. Vulnerability Details CVEID: CVE-2014-3045 DESCRIPTION: One of the purposes of chuser command is to modif...

CVE-2014-3045

CVE-2014-3045 affects IBM SONAS and IBM Storwize V7000 Unified (1.3.0.0–1.4.3.2). Using chuser with -p places the administrative password in the shell history, exposing it to root. The fix is available in version 1.4.3.3 (or later). Workarounds include adjusting HISTIGNORE for root or clearing hi...