Most recent entries from all

bdu:2023-05855

EUVD-2026-196646

fkie_cve-2023-39379

Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form. As a result, the password for the proxy server that is configured in ISM may be retrieved. Affected products and versions are as follows: Fujitsu Software Infrastructure Manager Advanced Edition V2.8.0.060, Fujitsu Software Infrastructure Manager Advanced Edition for PRIMEFLEX V2.8.0.060, and Fujitsu Software Infrastructure Manager Essential Edition V2.8.0.060.

GHSA-28jw-278j-42f5

gsd-2023-39379

jvndb-2023-000077

Fujitsu Software Infrastructure Manager (ISM) V2.8.0.060, provided by Fujitsu Limited, stores the password for the proxy server in cleartext form to the product's maintenance data (ismsnap) (CWE-312) under the following conditions. <ul><li>Using a proxy server that requires authentication in the connection from ISM to internet</li><li>The user ID and/or the password for the proxy server contain "\" (backslash) character</li><li>The product's firmware download function is enabled (*)</li> * This is a function for the Europe Region and is disabled by default</ul> Fujitsu Limited reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Fujitsu Limited coordinated under the Information Security Early Warning Partnership.