IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browsers application command history. By accessing browser history, an attacker could exploit this vulnerability to obtain other user accounts passwords. IBM X-Force ID: 226322.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Spectrum_protect | Ibm | 8.1.12.000 (including) | 8.1.14 (excluding) |