CVE-2016-0371 : The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while application

The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while application tracing is enabled.

Published 2017-02-01 21:59:00

Updated 2022-12-12 21:26:49

Source IBM Corporation

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2016-0371

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-0371

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
1.9	LOW	AV:L/AC:M/Au:N/C:P/I:N/A:N	3.4	2.9	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2016-0371

http://www.securityfocus.com/bid/94148

IBM Tivoli Storage Manager CVE-2016-0371 Local Information Disclosure Vulnerability
Broken Link;Third Party Advisory;VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg21985114

IBM Security Bulletin: Password Disclosure via application tracing in IBM Tivoli Storage Manager Client (CVE-2016-0371)
Patch;Vendor Advisory

Products affected by CVE-2016-0371

IBM » Tivoli Storage Manager
Versions from including (>=) 7.1.0.0 and up to, including, (<=) 7.1.6.2
cpe:2.3:a:ibm:tivoli_storage_manager:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: N/A
When used together with: HP » Hp-ux » Version: N/A
When used together with: IBM » AIX » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
When used together with: Oracle » Solaris » Version: N/A
IBM » Tivoli Storage Manager
Versions from including (>=) 6.4.0.0 and up to, including, (<=) 6.4.3.3
cpe:2.3:a:ibm:tivoli_storage_manager:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: N/A
When used together with: HP » Hp-ux » Version: N/A
When used together with: IBM » AIX » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
When used together with: Oracle » Solaris » Version: N/A
IBM » Tivoli Storage Manager
Versions from including (>=) 5.5 and up to, including, (<=) 6.3.2.5
cpe:2.3:a:ibm:tivoli_storage_manager:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: N/A
When used together with: HP » Hp-ux » Version: N/A
When used together with: IBM » AIX » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
When used together with: Oracle » Solaris » Version: N/A

Vulnerability Details : CVE-2016-0371

Exploit prediction scoring system (EPSS) score for CVE-2016-0371

CVSS scores for CVE-2016-0371

References for CVE-2016-0371

Products affected by CVE-2016-0371