Description
IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096777
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/95629
Scores
EPSS
0.0031
EPSS Percentile
23.1%
Details
CWE
CWE-200
Status
published
Products (3)
ibm/serverguide
< 9.60
ibm/toolscenter_suite
< 9.60
ibm/updatexpress_system_packs_installer
< 9.60
Published
Jan 17, 2015
Tracked Since
Feb 18, 2026