CVE-2014-8923

Published: Mar 25, 2015Modified: May 6, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The (1) IBM Tivoli Identity Manager Active Directory adapter before 5.1.24 and (2) IBM Security Identity Manager Active Directory adapter before 6.0.14 for IBM Security Identity Manager on Windows, when certain log and trace levels are configured, store the cleartext administrator password in a log file, which allows local users to obtain sensitive information by reading a file.

Affected (2)

Products: Ibm: Security Identity Manager Active Directory Adapter, Tivoli Identity Manager Active Directory Adapter

2 products

Security Identity Manager Active Directory Adapter

Tivoli Identity Manager Active Directory Adapter

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Identity Manager Active Directory Adapter	Up to 6.0.14
Ibm Tivoli Identity Manager Active Directory Adapter	Up to 5.1.20

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

http://www-01.ibm.com/support/docview.wss?uid=swg21699902

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21699902

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.