Security Bulletin: Password Disclosure via application tracing in IBM Tivoli Storage Manager Client (CVE-2016-0371)

Summary When application tracing is enabled and a password change operation is performed, the Tivoli Storage Manager IBM Spectrum Protect password is displayed in plain text in the trace output. Vulnerability Details CVEID: CVE-2016-0371 DESCRIPTION: The Tivoli Storage Manager TSM password may be...

CVE-2016-0371

The CVE-2016-0371 issue affects IBM Tivoli Storage Manager family where the password can be disclosed in plain text via application tracing output when tracing is enabled. IBM security bulletins list affected products/versions across several components: IBM Tivoli Storage Manager Client/API (and ...