What’s Vulnerable › Vulnerabilities

CVE-2015-4949

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-08-23 · updated 2026-06-17
• Weakness: CWE-200

Description

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server 7.1 before 7.1.2, Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 7.1 before 7.1.2, and Tivoli Storage FlashCopy Manager 4.1 before 4.1.2 place cleartext passwords in exception messages, which allows physically proximate attackers to obtain sensitive information by reading GUI pop-up windows, a different vulnerability than CVE-2015-6557.

Affected products

• IBM Tivoli Storage Flashcopy Manager: 4.1.0, 4.1.2
• IBM Tivoli Storage Manager For Databases Data Protection For Microsoft Sql Server: 7.1, 7.2
• IBM Tivoli Storage Manager For Mail Data Protection For Microsoft Exchange Server: 7.1, 7.2

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT03480
• http://www-01.ibm.com/support/docview.wss?uid=swg21963630
• http://www.securitytracker.com/id/1033270
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT03480
• http://www-01.ibm.com/support/docview.wss?uid=swg21963630
• http://www.securitytracker.com/id/1033270

Get alerted when CVE-2015-4949 or the next vulnerability affects your stack