Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-3015 State: PUBLISHED Published: 2017-04-05T18:00:00 Last Updated: 2024-08-05T23:40:15.020Z Vendors: IBM Corporation Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998887. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21998887 - http://www.securityfocus.com/bid/97279
CVE ID: CVE-2016-3016 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:14.421Z Vendors: IBM Corporation Products: Access Manager Problem Types: Gain Access Description: IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an authenticated attacker to load malicious code. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995518
CVE ID: CVE-2016-3017 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:14.440Z Vendors: IBM Corporation Products: Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995519
CVE ID: CVE-2016-3018 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:14.451Z Vendors: IBM Corporation Products: Access Manager Problem Types: Cross-Site Scripting Description: IBM Security Access Manager for Web is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96380 - http://www.ibm.com/support/docview.wss?uid=swg21995347
CVE ID: CVE-2016-3019 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-05T23:40:15.023Z Vendors: IBM Products: Security Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager for Web 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 114462. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98832 - http://www.ibm.com/support/docview.wss?uid=swg21988419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/114462 - http://www.securitytracker.com/id/1038616
CVE ID: CVE-2016-3020 State: PUBLISHED Published: 2017-02-07T16:00:00 Last Updated: 2024-08-05T23:40:14.481Z Vendors: IBM Corporation Products: Access Manager Problem Types: Bypass Security Description: IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to bypass validation and load a page with malicious content. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21996826
CVE ID: CVE-2016-3021 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:15.189Z Vendors: IBM Corporation Products: Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a specially crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96114 - http://www.ibm.com/support/docview.wss?uid=swg21995436
CVE ID: CVE-2016-3022 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:15.218Z Vendors: IBM Corporation Products: Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorrect file permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96130 - http://www.ibm.com/support/docview.wss?uid=swg21995360
CVE ID: CVE-2016-3023 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:15.221Z Vendors: IBM Corporation Products: Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager for Web could allow an unauthenticated user to gain access to sensitive information by entering invalid file names. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995348 - http://www.securityfocus.com/bid/96124
CVE ID: CVE-2016-3024 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:15.154Z Vendors: IBM Corporation Products: Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995340 - http://www.securityfocus.com/bid/96132
CVE ID: CVE-2016-3025 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-05T23:40:15.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89258 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89240 - http://www.securityfocus.com/bid/93178 - http://www-01.ibm.com/support/docview.wss?uid=swg21991107
CVE ID: CVE-2016-3027 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:15.158Z Vendors: IBM Corporation Products: Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21994440 - http://www.securityfocus.com/bid/96127
CVE ID: CVE-2016-3028 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-05T23:40:15.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leveraging LMI admin access. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89257 - http://www-01.ibm.com/support/docview.wss?uid=swg21990317 - http://www.securityfocus.com/bid/93176 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89322 - http://www-01.ibm.com/
p://www.securityfocus.com/bid/93176 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89322 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV89326
CVE ID: CVE-2016-3029 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:15.145Z Vendors: IBM Corporation Products: Access Manager Problem Types: Gain Access Description: IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96133 - http://www.ibm.com/support/docview.wss?uid=swg21995345
CVE ID: CVE-2016-3031 State: PUBLISHED Published: 2017-04-05T18:00:00 Last Updated: 2024-08-05T23:40:15.189Z Vendors: IBM Corporation Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998887. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97280 - http://www.ibm.com/support/docview.wss?uid=swg21998887
CVE ID: CVE-2016-3032 State: PUBLISHED Published: 2017-05-10T14:00:00 Last Updated: 2024-08-05T23:40:15.144Z Vendors: IBM Corporation Products: Cognos Analytics Problem Types: Cross-Site Scripting Description: IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 114516. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg21999791
CVE ID: CVE-2016-3033 State: PUBLISHED Published: 2016-12-01T11:00:00 Last Updated: 2024-08-05T23:40:15.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM AppScan Source 8.7 through 9.0.3.3 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21987326 - http://www.securityfocus.com/bid/92388
CVE ID: CVE-2016-3034 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:15.195Z Vendors: IBM Corporation Products: AppScan Source Problem Types: Obtain Information Description: IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt information more easily. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995903 - http://www.securityfocus.com/bid/95195
CVE ID: CVE-2016-3035 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:15.097Z Vendors: IBM Corporation Products: AppScan Source Problem Types: Obtain Information Description: IBM AppScan Source could reveal some sensitive information through the browsing of testlinks on the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95177 - http://www.ibm.com/support/docview.wss?uid=swg21987325
CVE ID: CVE-2016-3036 State: PUBLISHED Published: 2017-04-17T21:00:00 Last Updated: 2024-08-05T23:40:15.159Z Vendors: IBM Corporation Products: Cognos TM1 Problem Types: Denial of Service Description: IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets. A remote attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 114612. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21999649 - http://www.securityfocus.com/bid/97918
CVE ID: CVE-2016-3037 State: PUBLISHED Published: 2017-04-17T21:00:00 Last Updated: 2024-08-05T23:40:15.153Z Vendors: IBM Corporation Products: Cognos TM1 Problem Types: Obtain Information Description: IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with user interaction could obtain this sensitive information. IBM X-Force ID: 114613. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21999649 - http://www.securityfocus.com/bid/97917
CVE ID: CVE-2016-3038 State: PUBLISHED Published: 2017-04-17T21:00:00 Last Updated: 2024-08-05T23:40:15.084Z Vendors: IBM Corporation Products: Cognos TM1 Problem Types: Cross-Site Scripting Description: IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 114614. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21999649 - http://www.securityfocus.com/bid/97915
CVE ID: CVE-2016-3039 State: PUBLISHED Published: 2016-07-17T22:00:00 Last Updated: 2024-08-05T23:40:15.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985858 - http://www-01.ibm.com/support/docview.wss?uid=swg1LO89357 - http://www.securityfocus.com/bid/91796
CVE ID: CVE-2016-3040 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-05T23:40:15.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) Liberty, as used in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92986 - http://www-01.ibm.com/support/docview.wss?uid=swg21989205
CVE ID: CVE-2016-3042 State: PUBLISHED Published: 2016-10-01T01:00:00 Last Updated: 2024-08-05T23:40:15.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving OpenID Connect clients. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI64790 - http://www.securityfocus.com/bid/92985 - http://www-01.ibm.com/support/docview.wss?uid=swg21986716
CVE ID: CVE-2016-3043 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:15.129Z Vendors: IBM Corporation Products: Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995446 - http://www.securityfocus.com/bid/95107
CVE ID: CVE-2016-3044 State: PUBLISHED Published: 2016-12-01T11:00:00 Last Updated: 2024-08-05T23:40:15.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.3-65.10 and 3.1 before 3.1.0.2 allows guest OS users to cause a denial of service (host OS infinite loop and hang) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://rhn.redhat.com/errata/RHSA-2016-1033.html - http://www.securityfocus.com/bid/92123 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1023969
CVE ID: CVE-2016-3045 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:15.078Z Vendors: IBM Corporation Products: Access Manager Problem Types: Obtain Information Description: IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21995435 - http://www.securityfocus.com/bid/95103
CVE ID: CVE-2016-3046 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:15.139Z Vendors: IBM Corporation Products: Access Manager Problem Types: Data Manipulation Description: IBM Security Access Manager for Web is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements which could allow the attacker to view information in the back-end database. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95104 - http://www.ibm.com/support/docview.wss?uid=swg21995527
CVE ID: CVE-2016-3047 State: PUBLISHED Published: 2016-12-01T11:00:00 Last Updated: 2024-08-05T23:40:15.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21987126
CVE ID: CVE-2016-3048 State: PUBLISHED Published: 2017-11-01T21:00:00Z Last Updated: 2024-09-17T03:33:50.391Z Vendors: IBM Products: OpenPages GRC Platform Problem Types: Cross-Site Scripting Description: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 114711. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/114711 - http://www.ibm.com/suppo
ww.securityfocus.com/bid/101660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/114711 - http://www.ibm.com/support/docview.wss?uid=swg21997685
CVE ID: CVE-2016-3049 State: PUBLISHED Published: 2017-10-24T21:00:00 Last Updated: 2024-08-05T23:40:14.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 114712. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101568 - http://www.ibm.com/support/docview.wss?uid=swg21997686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/114712
CVE ID: CVE-2016-3051 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-05T23:40:15.240Z Vendors: IBM Products: Security Access Manager Problem Types: Bypass Security Description: IBM Security Access Manager for Web 9.0.0 could allow an authenticated user to access some privileged functionality of the server. IBM X-Force ID: 114714. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/114714 - http://www.ibm.com/support/docview.wss?uid=swg21995724 - http://www.securitytracker.com/id/1038615 - http://www.securityfocus.com/bid/98912
CVE ID: CVE-2016-3052 State: PUBLISHED Published: 2017-02-22T19:00:00 Last Updated: 2024-08-05T23:40:15.191Z Vendors: IBM Corporation Products: WebSphere MQ Problem Types: Obtain Information Description: Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network. This data could be intercepted using man in the middle techniques. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21998660 - http://www.securityfocus.com/bid/96400
CVE ID: CVE-2016-3053 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-05T23:40:15.091Z Vendors: IBM Corporation Products: AIX Problem Types: Gain Privileges Description: IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93605 - http://aix.software.ibm.com/aix/efixes/security/lsmcode_advisory2.asc - https://www.exploit-db.com/exploits/40709/ - http://www.securitytracker.com/id/1037030
CVE ID: CVE-2016-3054 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-05T23:40:15.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM FileNet Workplace 4.0.2 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92332 - http://www-01.ibm.com/support/docview.wss?uid=swg21987129
CVE ID: CVE-2016-3055 State: PUBLISHED Published: 2016-12-01T11:00:00 Last Updated: 2024-08-05T23:40:15.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92411 - http://www-01.ibm.com/support/docview.wss?uid=swg21987128
CVE ID: CVE-2016-3056 State: PUBLISHED Published: 2016-10-14T01:00:00 Last Updated: 2024-08-05T23:40:15.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Business Space in IBM Business Process Manager 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, and 8.5 before 8.5.7.0 CF2016.09 allows remote authenticated users to inject arbitrary web script or HTML via crafted content. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93405 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR56300 - http://www-01.ibm.com/support/docview.wss?uid=swg21990850
CVE ID: CVE-2016-3057 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-05T23:40:15.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94389 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT15790 - http://www-01.ibm.com/support/docview.wss?uid=swg21989578
CVE ID: CVE-2016-3059 State: PUBLISHED Published: 2016-08-08T01:00:00 Last Updated: 2024-08-05T23:40:15.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (aka IBM Spectrum Protect for Databases) 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server (aka IBM Spectrum Protect Snapshot) 3.1 before 3.1.1.7 and 3.2 before 3.2.1.9 allow local users to discover a cleartext SQL Server password by reading the Task List in the MMC GUI. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21987333