VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 17, 2015· Updated Jun 17, 2026

CVE-2014-4835

CVE-2014-4835

Description

IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file.

Affected products

6
  • IBM/Serverguide2 versions
    cpe:2.3:a:ibm:serverguide:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:serverguide:*:*:*:*:*:*:*:*range: <=9.60
    • (no CPE)range: <9.63
  • IBM/Toolscenter Suite2 versions
    cpe:2.3:a:ibm:toolscenter_suite:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:toolscenter_suite:*:*:*:*:*:*:*:*range: <=9.60
    • (no CPE)range: <9.63
  • IBM/Updatexpress System Packs Installer2 versions
    cpe:2.3:a:ibm:updatexpress_system_packs_installer:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:updatexpress_system_packs_installer:*:*:*:*:*:*:*:*range: <=9.60
    • (no CPE)range: <9.63

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.