Description
IBM Tivoli Event Pump 4.2.2, when the LOG_REQUESTS and VALIDATE_SOAP_USERS options are enabled, places credentials into the AOPSCLOG (aka AOPLOG) data set, which allows local users to obtain sensitive information by reading the data.
References
- tep-aopsclog-info-disclosure(74641) vdb-entry
- OA38586 vendor-advisory