CVE-2019-4385

CVSS 5.9 MEDIUMEPSS 0.3%

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 5.9EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

19 jun 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog. This can result in an attacker gaining access to sensitive information as well as vSnap. IBM X-Force ID: 162173.

CVSS:3.0/I:N/C:H/S:C/AV:L/PR:N/AC:H/A:N/UI:N/RC:C/E:U/RL:O

Productos afectados

IBM · Spectrum Protect Plus

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/162173 http://www.ibm.com/support/docview.wss?uid=ibm10886099 http://www.securityfocus.com/bid/108899