PT-2008-2073 · Ibm · Ibm Tivoli Business Service Manager

Publicado 2008-01-24 · Atualizado 2017-08-08 · CVE-2008-0441

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Business Service Manager (TBSM) version 4.1.1

Description The issue allows local users to obtain sensitive information because passwords are stored in cleartext after external authentication and reconfig actions, which triggers writing the password to SM server.log.

Recommendations For IBM Tivoli Business Service Manager (TBSM) version 4.1.1, consider restricting access to the SM server.log file to minimize the risk of sensitive information disclosure until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2008-0441

Produtos afetados

Ibm Tivoli Business Service Manager

Referências · 7

• 🔥 http://www-1.ibm.com/support/docview.wss?uid=swg24017939 · Exploit
• http://securityfocus.com/bid/27388 · Nota
• http://securitytracker.com/id?1019250 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39822 · Nota
• http://vupen.com/english/advisories/2008/0240 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0441 · Nota de Segurança
• http://secunia.com/advisories/28603 · Aviso do Fabricante