CVE-2015-6557
Published Aug 23, 2015
Last updated 9 years ago
Overview
- Description
- IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server 5.5 before 5.5.6.1, 6.3 before 6.3.1.5, 6.4 before 6.4.1.7, and 7.1 before 7.1.2; Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 5.5 before 5.5.1.1, 6.1 before 6.1.3.7, 6.3 before 6.3.1.5, 6.4 before 6.4.1.7, and 7.1 before 7.1.2; and Tivoli Storage FlashCopy Manager 3.1 before 3.1.1.5, 3.2 before 3.2.1.7, and 4.1 before 4.1.2, when application tracing is used, place cleartext passwords in exception messages, which allows physically proximate attackers to obtain sensitive information by reading trace output, a different vulnerability than CVE-2015-4949.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 2.1
- Impact score
- 2.9
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_flashcopy_manager:3.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BC01D70-F51D-4F55-A829-DFE0104AEF79"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_flashcopy_manager:3.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD889452-6341-450B-9DF2-261B66A2ABB0"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_flashcopy_manager:3.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B5B7107-61B4-4B55-A138-7648D35497D5"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_flashcopy_manager:3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61D1CD20-0895-406E-904A-AC160C288943"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_flashcopy_manager:4.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B29338F6-E909-4114-97F9-F71A648AF7AE"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_flashcopy_manager:4.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B39B501-9095-47D7-B51C-0FF9696905D3"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "525876F0-6E63-4AF3-BA34-D6B7D89131AF"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:5.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84BAD8C8-87A4-41FA-B480-072363472BBA"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:5.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E21B096-464F-4777-9CDD-AD2BB1850C09"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:5.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1D75A51-F385-4EB3-B4F7-AF133F8A2E5A"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:5.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAEF9535-ED13-45CF-8CB7-86096E2A0050"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:5.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FE9E7E8-E64F-4053-811F-F080ADDA8DAC"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:5.5.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C3807F5-F2E0-44B1-AFD6-8752FD578E07"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3216366D-1432-4665-92B8-ABA583B0EB1E"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:6.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "130BD434-03FC-4341-83A4-2772CA9C3880"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FFEEDFF-FEB6-4450-AEC0-AB6B8AB2D959"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:6.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A9B5EB6-8448-4D99-846B-F2F27EC5C64E"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "907E5E7D-27E2-43A0-89DD-BE9ACD8D662D"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_databases_data_protection_for_microsoft_sql_server:7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94A54B90-1899-4B9C-85F3-6F1B8679FA0A"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_mail_data_protection_for_microsoft_exchange_server:5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCF14229-0D33-4A68-BA72-8F9CB728C1F4"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_mail_data_protection_for_microsoft_exchange_server:5.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F40EE915-80D1-429B-A35E-0F415E96ADB3"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_mail_data_protection_for_microsoft_exchange_server:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44FC12F3-39C7-49FD-BB60-7C21607C77DB"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_mail_data_protection_for_microsoft_exchange_server:6.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "881ACFC0-4354-448A-A9BB-2F5BB72358C3"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_mail_data_protection_for_microsoft_exchange_server:6.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC6978D5-4AF1-48D6-A7D5-E0158F4C8DE3"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_mail_data_protection_for_microsoft_exchange_server:6.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24E7AD18-232C-4996-931F-72545CB38B3A"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_mail_data_protection_for_microsoft_exchange_server:6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5124F05-4C0E-422A-8CB3-E93826767ACF"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_mail_data_protection_for_microsoft_exchange_server:6.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "144ED09E-DE01-450C-84DF-DEFE9E6EE48B"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_mail_data_protection_for_microsoft_exchange_server:6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1B8D631-0EBE-47AB-AACA-9A0BA1077C1D"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_mail_data_protection_for_microsoft_exchange_server:6.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D76E0E49-1486-4518-BD46-826786BAA937"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_mail_data_protection_for_microsoft_exchange_server:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B3CB08F-D41F-4441-9078-2C9E68EC2EDD"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_for_mail_data_protection_for_microsoft_exchange_server:7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DAC6E47-07B3-430C-B7E9-7E185685DD88"
}
],
"operator": "OR"
}
]
}
]