CVE-2022-22396

Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases

Medium · published June 6, 2022

CVSS v3.0
6.8
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases. Credentials could be the remote vSnap, offload targets, or VADP credentials depending on the operation performed. Credentials that are using API key or certificate are not printed. IBM X-Force ID: 222231.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/I:N/A:N/AV:N/AC:L/S:C/UI:N/PR:H/C:H/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00709 · 53.0th percentile
Published
2022-06-06T16:30Z
EPSS history
Timeline
  • 06 JUN 16:30Z
    Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases
    cvelistv5