CVE-2019-4385

IBM Spectrum Protect Plus 10.1.2 is affected by CVE-2019-4385, where the vSnap CIFS password can be exposed in the IBM Spectrum Protect Plus Joblog, leading to information disclosure of sensitive data and potentially access to vSnap. Affected versions are 10.1.2.219 through 10.1.2.303. The root c...

Security Bulletin: Password exposure via job log in IBM Spectrum Protect Plus (CVE-2019-4385)

Summary IBM Spectrum Protect Plus may display the vSNAP CIFS password in the Spectrum Protect Plus job log Vulnerability Details CVEID: CVE-2019-4385 DESCRIPTION: IBM Spectrum Protect Plus may display the vSnap CIFS password in the IBM Spectrum Protect Plus job log. This can result in an attacker...