NetSight
IP …
medium5.5

CVE-2016-5927

IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6,…

Impact

IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output.

Affected products

VendorProductAffected versions
IbmTivoli Storage Manager For Space Management
Versions 6.3.0, 6.3.2, 6.4.0, 6.4.0.0, 6.4.1, 6.4.2

Weakness classification

CWE-200

References