CVE-2012-0742 | BDVDB-2026-49782 Detail

Description#

IBM Tivoli Event Pump 4.2.2, when the LOG_REQUESTS and VALIDATE_SOAP_USERS options are enabled, places credentials into the AOPSCLOG (aka AOPLOG) data set, which allows local users to obtain sensitive information by reading the data.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/74641
http://www-01.ibm.com/support/docview.wss?uid=swg1OA38586

Exploit#

No public exploit known

History#

Version 12012-04-09Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.