What’s Vulnerable › Vulnerabilities

CVE-2016-8916

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-05-05 · updated 2026-06-17
• Weakness: CWE-200

Description

IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is issued. IBM X-Force ID: 118472.

Affected products

• IBM Corporation Tivoli Storage Manager: through 6.3; 6.4.0.0, 6.4.1, 6.4.1.0, 6.4.2, 6.4.2.100, 6.4.2.200 (+29)

References

• http://www.ibm.com/support/docview.wss?uid=swg21998166
• http://www.securityfocus.com/bid/98335
• http://www.ibm.com/support/docview.wss?uid=swg21998166
• http://www.securityfocus.com/bid/98335

Get alerted when CVE-2016-8916 or the next vulnerability affects your stack