CVEvulnerability

CVE-2014-8923

1.9 LOW Published 2015-03-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-03-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

The (1) IBM Tivoli Identity Manager Active Directory adapter before 5.1.24 and (2) IBM Security Identity Manager Active Directory adapter before 6.0.14 for IBM Security Identity Manager on Windows, when certain log and trace levels are configured, store the cleartext administrator password in a log file, which allows local users to obtain sensitive information by reading a file.

Affected configurations

• ibm security identity manager active directory adapter (<= 6.0.14) • ibm tivoli identity manager active directory adapter (<= 5.1.20)

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References