IBM Tivoli Storage Manager HSM for Windows Password Exposure Vulnerability
CVE-2016-5918

4.7MEDIUM

Key Information:

Vendor

IBM
Status
Tivoli Storage Manager Hsm For Windows
Vendor
CVE Published:
8 February 2017

What is CVE-2016-5918?

A vulnerability exists within IBM Tivoli Storage Manager HSM for Windows, where the encrypted password for Tivoli Storage Manager can be revealed in application trace logs. This occurs when the password access option is set to prompt, and the password is subsequently changed. Such exposure can lead to potential unauthorized access to sensitive data, thereby compromising data integrity and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Tivoli Storage Manager HSM for Windows 5.3.2.0

Tivoli Storage Manager HSM for Windows 5.3.5.0

Tivoli Storage Manager HSM for Windows 5.4.0.0

References

http://www.ibm.com/support/docview.wss?uid=swg21988728
x_refsource_CONFIRM
http://www.securityfocus.com/bid/92534
vdb-entryx_refsource_BID

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.