VulnerabilityModified

CVE-2014-4835

IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file.

LOW 2.1EPSS 0.31%

Does this matter?

Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
EPSS: 0.31% probability · 24th percentile
CISA KEV: Not listed
Weakness: CWE-200
Affected: ibm/serverguide · ibm/toolscenter suite · ibm/updatexpress system packs installer
Source: psirt@us.ibm.com

References

http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096777Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95629
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096777Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95629

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.