Security Bulletin: IBM Tivoli Application Dependency Discovery Manager (TADDM) could expose password hashes stored in system memory on target Windows systems that are discovered by TADDM

Summary IBM Tivoli Application Dependency Discovery Manager TADDM requires a local service account to communicate with Windows servers targets via WMI. WMI caches the password hash in memory on each target Windows system when using certain authentication methods. By TADDM design, and according to...

CVE-2018-1675

CVE-2018-1675 concerns IBM Tivoli Application Dependency Discovery Manager (TADDM) versions 7.2.2 and 7.3. The issue arises because password hashes can be exposed in memory on target Windows systems discovered by TADDM, due to WMI credential caching and shared service account behavior. Attack pat...