Vulnerabilities > CVE-2007-1940 - Unspecified vulnerability in IBM Tivoli Business Service Manager 4.1

047910
CVSS 4.9 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
local
low complexity
ibm

Summary

IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading (1) ncisetup.db or (2) msi.log.

Vulnerable Configurations

Part Description Count
Application
Ibm
1