Fujitsu Software Infrastructure Manager

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Low attack complexity Vendor: Fujitsu Software Equipment: Infrastructure Manager Vulnerability: Cleartext Storage of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker retrieving...

CVE-2023-39903

CVE-2023-39903 affects Fujitsu Software Infrastructure Manager (ISM) prior to 2.8.0.061. The ismsnap component can insecurely collect and store authorization credentials in cleartext (notably in /var/log/fujitsu/ServerViewSuite/ism/FirmwareManagement/FirmwareManagement.log) when performing Firmwa...