CVE-2012-0742
CVE-2012-0742
IBM Tivoli Event Pump 4.2.2, when the LOG_REQUESTS and VALIDATE_SOAP_USERS options are enabled, places credentials into the AOPSCLOG (aka AOPLOG) data set, which allows local users to obtain sensitive information by reading the data.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →