CVE-2007-1940
IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext,...
IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading (1) ncisetup.db or (2) msi.log.
Exploit likelihood
What each source reports
NVD Score used
IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading (1) ncisetup.db or (2) msi.log.
- Record
CVE-2007-1940- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:C/I:N/A:N - Updated
- 2026-11-02
CVE List No score
IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading (1) ncisetup.db or (2) msi.log.
- Record
CVE-2007-1940- Updated
- 2026-11-02
EUVDEUVD-2007-1934 No score
IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading (1) ncisetup.db or (2) msi.log.
- Record
EUVD-2007-1934- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pp9f-qc59-43m6 No score
IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext,...
IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading (1) ncisetup.db or (2) msi.log.
- Record
GHSA-pp9f-qc59-43m6- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1940 is a medium vulnerability (CVSS 4.9) in Ibm Tivoli Business Service Manager, published April 11, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. No source names a fixed version.
References
osvdb.org/34770
securityfocus.com/bid/23298
vupen.com/english/advisories/2007/1248
secunia.com/advisories/24763
exchange.xforce.ibmcloud.com/vulnerabilities/33426
securitytracker.com/id?1017869
www-1.ibm.com/support/docview.wss?uid=swg24015473
nvd.nist.gov/vuln/detail/CVE-2007-1940
github.com/advisories/GHSA-pp9f-qc59-43m6