CVE-2015-7433

IBM Capacity Management Analytics 2.1.0.0 allows local users to discover cleartext usernames and passwords by leveraging access to the CMA install machine. IBM X-Force ID: 107862.

• CWE-200

• http://www-01.ibm.com/support/docview.wss?uid=swg21974556Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/107862VDB Entry, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21974556Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/107862VDB Entry, Vendor Advisory

Published

Mar 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7427IBM DataPower Gateway appliances with firmware 6.x before 6.…
• CVE-2015-7428Open redirect vulnerability in IBM WebSphere Portal 8.0.x be…
• CVE-2015-7429The Data Protection extension in the VMware GUI in IBM Tivol…
• CVE-2015-7430The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7…
• CVE-2015-7431Cross-site scripting (XSS) vulnerability in Queue Watcher in…
• CVE-2015-7432IBM Capacity Management Analytics 2.1.0.0 allows local users…
• CVE-2015-7434IBM Capacity Management Analytics 2.1.0.0 allows local users…
• CVE-2015-7435IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 bef…
• CVE-2015-7436IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 bef…
• CVE-2015-7437Queue Watcher in IBM Sterling B2B Integrator 5.2 allows loca…
• CVE-2015-7438IBM Sterling B2B Integrator 5.2 allows local users to obtain…
• CVE-2015-7439Cross-site scripting (XSS) vulnerability in InfoSphere Data …