CVE-2014-4835

medium

Description

IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/95629

http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096777

Details

Source: Mitre, NVD

Published: 2015-01-17

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N

Severity: Low

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.0005

Detections

Analytics