CVE-2014-4835

IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file.

Score

CVSS 2.0 2.1 Low

Status

Modified - psirt@us.ibm.com

Published

2015-01-17

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Serverguide (Ibm)
• Toolscenter Suite (Ibm)
• Updatexpress System Packs Installer (Ibm)

References

• http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096777
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95629