« Volver al listado

CVE-2014-4835

Estado: ModificadaBaja (2.1)—

IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

IBM — ServerguideIBM — Toolscenter SuiteIBM — Updatexpress System Packs Installer

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-4835",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-01-17T11:59:03.157",
  "references": [
    {
      "url": "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096777",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95629",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096777",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95629",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file."
    },
    {
      "lang": "es",
      "value": "IBM ServerGuide anterior a 9.63, UpdateXpress System Packs Installer (UXSPI) anterior a 9.63, y ToolsCenter Suite anterior a 9.63 colocan credenciales en registros, lo que permite a usuarios locales obtener información sensible mediante la lectura de un fichero."
    }
  ],
  "lastModified": "2026-06-17T00:10:39.917",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:serverguide:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "806BF4AB-D601-458A-B510-B060C49C7D84",
              "versionEndIncluding": "9.60"
            },
            {
              "criteria": "cpe:2.3:a:ibm:toolscenter_suite:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC9B810A-0D65-43CE-A263-ADE4B22DD365",
              "versionEndIncluding": "9.60"
            },
            {
              "criteria": "cpe:2.3:a:ibm:updatexpress_system_packs_installer:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C050948-62B1-46DF-846B-B515BF858FB2",
              "versionEndIncluding": "9.60"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}