CVE-2015-7488 — Sensitive Information Exposure in IBM Spectrum Scale

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
5.9MEDIUMNVD
EPSS
0.1%
top 76.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Spectrum Scale
Timeline
PublishedJan 27
Latest updateMay 17

Description

IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allows remote attackers to discover an LDAP password via unspecified vectors.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:NExploitability: 1.4 | Impact: 4.0

Affected Packages1 packages

▶NVDibm/spectrum_scale4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-9x3f-vv54-cjv8: IBM Spectrum Scale 4↗2022-05-17
▶
CVEList
CVE-2015-7488: IBM Spectrum Scale 4↗2016-01-27
▶
CVE-2015-7488 — Sensitive Information Exposure in IBM | cvebase