CVEvulnerability
CVE-2016-5918
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-02-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.7 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the password access option is prompt and the password is changed.
Affected configurations
• ibm tivoli storage manager for space management (<= 7.1.4.1)
• ibm tivoli storage manager for space management 7.1.0.0
• ibm tivoli storage manager for space management (<= 6.4.3.0)
• ibm tivoli storage manager for space management 6.4.0.0
• ibm tivoli storage manager for space management (<= 6.3)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.ibm.com/support/docview.wss?uid=swg21988728 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/92534 Third Party Advisory, VDB Entry
- http://www.ibm.com/support/docview.wss?uid=swg21988728 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/92534 Third Party Advisory, VDB Entry