Security Bulletin: Password Disclosure via instrumentation log in Tivoli Storage Manager (IBM Spectrum Protect) Client (CVE-2016-8916)

Summary When using the "set password" Tivoli Storage Manger IBM Spectrum Protect client command, the full text of the command and included password is written to the instrumentation log file if instrumentation tracing is enabled. For 7.1.6.0 and higher, instrumentation tracing is enabled by defau...

IBM Tivoli Storage Manager Information Disclosure Vulnerability - Windows

IBM Tivoli Storage Manager is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-8916

Summary: CVE-2016-8916 affects IBM Tivoli Storage Manager (IBM Spectrum Protect Client) versions 5.5, 6.x, and 7.1. When using the set password command, full password text is written to the instrumentation log if tracing is enabled, enabling local disclosure of credentials. The IBM bulletin notes...