CWE Code: 532
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Inclusion of Sensitive Information in Log Files
Summary: ibm cloud private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain sensitive oidc token that is printed to log files, which could be used to log in to the system as another user. ibm x-force id: 160512.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2019-08-05
Last Modified Date: 2019-10-09