NVD

Id
42823  
Name
CVE-2012-0742  
Description
IBM Tivoli Event Pump 4.2.2, when the LOG_REQUESTS and VALIDATE_SOAP_USERS options are enabled, places credentials into the AOPSCLOG (aka AOPLOG) data set, which allows local users to obtain sensitive information by reading the data.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-04-09  
Modified Date
2012-04-10  
Seq
2012-0742  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
215518 42823 CVE-2012-0742 OA38586  View
215519 42823 CVE-2012-0742 tep-aopsclog-info-disclosure(74641)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26320 JVNDB-2012-002027 IBM Tivoli Event Pump における重要な情報を取得される脆弱性 IBM Tivoli Event Pump には、LOG_REQUESTS および VALIDATE_SOAP_USERS オプションが有効な場合、AOPSCLOG データセットに認証情報を配する際に、重要な情報を取得される脆弱性が存在します。 CVE-2012-0742 53980 CVE-2012-0742 42823 1.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002027.html 2012-01-25 2012-04-11 View