CVE-2019-4385

Опубликовано: 19 июн. 2019

Источник: nvd

CVSS3: 5.9

CVSS3: 6.5

CVSS2: 2.1

EPSS Низкий

Описание

IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog. This can result in an attacker gaining access to sensitive information as well as vSnap. IBM X-Force ID: 162173.

Ссылки

http://www.ibm.com/support/docview.wss?uid=ibm10886099
Patch
Vendor Advisory
http://www.securityfocus.com/bid/108899
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/162173
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10886099
Patch
Vendor Advisory
http://www.securityfocus.com/bid/108899
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/162173
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:spectrum_protect_plus:*:*:*:*:*:*:*:*

Версия от 10.1.2.219 (включая) до 10.1.2.303 (включая)

EPSS

Процентиль: 21%

0.00067

Низкий

5.9 Medium

CVSS3

6.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-522

Связанные уязвимости

GHSA-59w4-5r3p-f58v

CVSS3: 6.5

github

больше 3 лет назад

EPSS

Процентиль: 21%

0.00067

Низкий

5.9 Medium

CVSS3

6.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-522