Some security issues have been reported in IBM Tivoli Business Service Manager, which potentially can be exploited by malicious, local users to disclose sensitive information.

The security issues are caused due to certain passwords being stored in clear text on reconfig or in SM_server.log.

The security issues are reported in 4.1.1.

Solution
Apply Interim Fix 1 (4.1.1.0-TIV-BSM-IF0001). Please see the vendor's advisory for details.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM (166896, 167722):
http://www-1.ibm.com/support/docview.wss?uid=swg24017939

Deep Links
Links available to Secunia VIM customers