CVE-2019-4385

IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog

Medium · published June 19, 2019

CVSS v3.0
5.9
EPSS
0%
Percentile
25.5
In the wild
Unconfirmed
What it is

IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog. This can result in an attacker gaining access to sensitive information as well as vSnap. IBM X-Force ID: 162173.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/I:N/C:H/S:C/AV:L/PR:N/AC:H/A:N/UI:N/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.00334 · 25.5th percentile
Published
2019-06-19T13:30Z
EPSS history
Timeline
  • 19 JUN 13:30Z
    IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog
    cvelistv5