CVE-2014-4835

I

BM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file.

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:serverguide:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:toolscenter_suite:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:updatexpress_system_packs_installer:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:10

Type Values Removed Values Added
References () http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096777 - Vendor Advisory () http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096777 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/95629 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/95629 -

Information

Published : 2015-01-17 11:59

Updated : 2025-04-12 10:46


NVD link : CVE-2014-4835

Mitre link : CVE-2014-4835

CVE.ORG link : CVE-2014-4835


JSON object : View

CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor