CVE-2013-5461

IBM Endpoint Manager for Remote Control 9.0.0 and 9.0.1 and Tivoli Remote Control 5.1.2 store multiple hashes of partial passwords, which makes it easier for remote attackers to decrypt passwords by leveraging access to the hashes. IBM X-Force ID: 88309.

Score

CVSS 3.0 8.8 High

Status

Modified - psirt@us.ibm.com

Published

2018-04-27

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• Endpoint Manager For Remote Control (Ibm)
• Tivoli Remote Control (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/88309
• https://www.ibm.com/blogs/psirt/ibm-security-bulletin-insecure-storage-of-passwords-in-ibm-endpoint-manager-for-remote-…
• https://www.ibm.com/blogs/psirt/ibm-security-bulletin-insecure-storage-of-passwords-in-tivoli-remote-control-cve-2013-5…