CVE-2014-3045

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-19 · updated 2026-06-17
Weakness: CWE-200

Description

IBM Scale Out Network Attached Storage (SONAS) 1.3.x and 1.4.x before 1.4.3.3 places an administrative password in the shell history upon use of the -p option to chuser, which allows local users to obtain sensitive information by leveraging root access.

Affected products

IBM Scale Out Network Attached Storage: through 1.4.3.2

References

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004815
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004815

Get alerted when CVE-2014-3045 or the next vulnerability affects your stack