Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form. As a result, the password for the proxy server that is configured in ISM may be retrieved. Affected products and versions are as follows: Fujitsu Software Infrastructure Manager Advanced Edition V2.8.0.060, Fujitsu Software Infrastructure Manager Advanced Edition for PRIMEFLEX V2.8.0.060, and Fujitsu Software Infrastructure Manager Essential Edition V2.8.0.060.
2023-08-04T10:15:09.870
2024-11-21T08:15:16.917
Modified
CVSSv3.1: 7.5 (HIGH)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | fujitsu | software_infrastructure_manager | 2.8.0.060 | Yes |
Application | fujitsu | software_infrastructure_manager | 2.8.0.060 | Yes |
Application | fujitsu | software_infrastructure_manager | 2.8.0.060 | Yes |