Cleartext Password Exposure in IBM Tivoli Storage Solutions
CVE-2015-7404

Currently unrated

Key Information:

Vendor

IBM
Status
Tivoli Storage Manager For Databases Data Protection For Microsoft Sql Server
Tivoli Storage Manager For Mail Data Protection For Microsoft Exchange Server
Vendor
CVE Published:
14 November 2015

What is CVE-2015-7404?

IBM Tivoli Storage Manager for Databases, Tivoli Storage Manager for Mail, and Tivoli Storage FlashCopy Manager for Windows have a vulnerability that allows cleartext passwords to be written to application trace logs during the execution of the changetsmpassword command. This misconfiguration enables local users to access sensitive credentials through the application trace output, posing a significant security risk to affected products.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www-01.ibm.com/support/docview.wss?uid=swg21969514
x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg1IT11349
vendor-advisoryx_refsource_AIXAPAR

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.