Miembros de
Boletines de Vulnerabilidades |
IBM Security Bulletin: Passwords May Be Logged When Some High Logging Level Flag is Used (CVE-2014-0890) |
|
Información sobre el sistema |
|
| Software afectado | IBM |
Descripción |
|
|
If a user sets a particular log flag (see below) to high level and uses Audio/Video chat, the users password may be logged in the clear or encoded (not encrypted). CVE(s): CVE-2014-0890 Affected product(s) and affected version(s): Sametime Connect versions: 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, 9.0.0.1 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21665658 X-Force More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_passwords_may_be_logged_when_some_high_logging_level_flag_is_used_cve_2014_0890?lang=en_us |
|
Identificadores estándar |
|
| Propiedad | Valor |
| CVE | CVE-2014-0890 ,CVE-2013-6731 ,CVE-2014-0855 ,CVE-2014-0822 ,CVE-2013-3983 ,CVE-2013-3978 ,CVE-2013-3988 ,CVE-2013-6742 ,CVE-2013-6743 and CVE-2013-5427. |
Histórico de versiones |
||
| Versión | Comentario | Fecha |
| 1.0 | Advisory issued | 2014-03-05 |