CVE-2016-8916

IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is issued. IBM X-Force ID: 118472.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
VendorProductVersion
ibmtivoli_storage_manager
𝑥
≤ 6.3
ibmtivoli_storage_manager
6.4.0.0
ibmtivoli_storage_manager
6.4.1
ibmtivoli_storage_manager
6.4.1.0
ibmtivoli_storage_manager
6.4.2
ibmtivoli_storage_manager
6.4.2.100
ibmtivoli_storage_manager
6.4.2.200
ibmtivoli_storage_manager
6.4.2.500
ibmtivoli_storage_manager
6.4.2.600
ibmtivoli_storage_manager
6.4.3
ibmtivoli_storage_manager
6.4.3.1
ibmtivoli_storage_manager
7.1
ibmtivoli_storage_manager
7.1..5.100
ibmtivoli_storage_manager
7.1.0.1
ibmtivoli_storage_manager
7.1.0.2
ibmtivoli_storage_manager
7.1.0.3
ibmtivoli_storage_manager
7.1.1
ibmtivoli_storage_manager
7.1.1.1
ibmtivoli_storage_manager
7.1.1.2
ibmtivoli_storage_manager
7.1.1.100
ibmtivoli_storage_manager
7.1.1.200
ibmtivoli_storage_manager
7.1.1.300
ibmtivoli_storage_manager
7.1.3
ibmtivoli_storage_manager
7.1.3.000
ibmtivoli_storage_manager
7.1.3.1
ibmtivoli_storage_manager
7.1.3.2
ibmtivoli_storage_manager
7.1.3.100
ibmtivoli_storage_manager
7.1.4
ibmtivoli_storage_manager
7.1.4.1
ibmtivoli_storage_manager
7.1.4.2
ibmtivoli_storage_manager
7.1.5
ibmtivoli_storage_manager
7.1.5.200
ibmtivoli_storage_manager
7.1.6
ibmtivoli_storage_manager
7.1.6.2
ibmtivoli_storage_manager
7.1.6.3
ibmtivoli_storage_manager
7.1.6.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.ibm.com/support/docview.wss?uid=swg21998166
http://www.securityfocus.com/bid/98335
http://www.ibm.com/support/docview.wss?uid=swg21998166
http://www.securityfocus.com/bid/98335