VULNERABILITY INTELLIGENCE

CVE-2016-3059

CVSS score6.2 MEDIUM

EPSS probability0.37%

CISA KEVNot currently listed

Published2016-08-08

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (aka IBM Spectrum Protect for Databases) 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server (aka IBM Spectrum Protect Snapshot) 3.1 before 3.1.1.7 and 3.2 before 3.2.1.9 allow local users to discover a cleartext SQL Server password by reading the Task List in the MMC GUI.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

psirt@us.ibm.com — Mitigation, Patch, Vendor Advisory
psirt@us.ibm.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry