Vulnerability in IBM Spss Analytic Server

CVE-2014-0920

IBM SPSS Analytic Server 1.0 before IF002 and 1.0.1 before IF004 logs cleartext passwords, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

EPSS: 0.016 (73.6th percentile) — read the EPSS interpretation.

Affected products

Ibm Spss_analytic_server — versions 1.0.0.0, 1.0.1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)