Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading (1) ncisetup.db or (2) msi.log.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Tivoli Business Service Manager NCISETUP.DB及MSI.LOG文件明文口令泄露漏洞
Vulnerability Description
IBM Tivoli Business Service Manager是美国IBM公司的一套企业级业务服务管理(BSM)解决方案。该方案提供了实时服务可视性和健康指示器、多个KPI历史时间分析和跟踪等。 IBM Tivoli Business Service Manager将各种系统口令未经加密便储存在了ncisetup.db(所有平台)和msi.log(Windows平台)文件中,允许本地用户轻易的检索到明文口令,获得非授权访问。
CVSS Information
N/A
Vulnerability Type
N/A