CVE-2008-0441: IBM Tivoli Business Service Manager

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Tivoli Business Service Manager (TBSM) 4.1.1 stores passwords in cleartext (1) after external authentication, which triggers writing the password to SM_server.log; and (2) after a reconfig action; which allows local users to obtain sensitive information.

Affected products

• IBM Tivoli Business Service Manager: version 4.1.1 only

Published 2008-01-25. Last modified 2026-06-16.