CVE-2016-5927

IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output.

Score

CVSS 3.0 5.5 Medium

Status

Modified - psirt@us.ibm.com

Published

2016-09-12

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Tivoli Storage Manager For Space Management (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT15203
• http://www-01.ibm.com/support/docview.wss?uid=swg21989006
• http://www.securityfocus.com/bid/92723