Security Bulletin: IBM Capacity Management Analytics affected by vulnerability password easy to decrypt in shell files (CVE-2015-7432)

Summary It is very easy to decrypt user and admin password from the setenv.sh and parameter.txt file Vulnerability Details CVEID: CVE-2015-7432 DESCRIPTION: IBM Capacity Management Analytics could allow a local user with special privileges to decrypt other CMA user's usernames and passwords. CVSS...

CVE-2015-7432

CVE-2015-7432 affects IBM Capacity Management Analytics 2.1.0.0. A local attacker with special privileges could decrypt usernames and passwords by abusing access to the files setenv.sh and parameter.txt, exposing sensitive credentials. The IBM advisory confirms the vulnerability exists in CMA 2.1...