CVE-2014-4835 IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive informat...
LowCVSS 2.1
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm serverguide | <= 9.60 | No fix listed |
| ibm toolscenter suite | <= 9.60 | No fix listed |
| ibm updatexpress system packs installer | <= 9.60 | No fix listed |
References
- www.ibm.com vendor-advisory
- ibm-serverguide-cve20144835-sec-bypass(95629) vdb-entry