Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-4385

IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog. This can result in an attacker gaining access to sensitive information as well as vSnap. IBM X-Force ID: 162173.

Published

2019-06-19T14:15:11.130

Last Modified

2024-11-21T04:43:32.240

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

3.9

Impact Score

2.9

Weaknesses

Type: Primary
CWE-522

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ibm	spectrum_protect_plus	≤ 10.1.2.303	Yes

References

http://www.ibm.com/support/docview.wss?uid=ibm10886099 Patch, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/108899 Broken Link, Third Party Advisory, VDB Entry ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/162173 VDB Entry, Vendor Advisory ([email protected])
http://www.ibm.com/support/docview.wss?uid=ibm10886099 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/108899 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/162173 VDB Entry, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)