IBM Security Bulletin: Password Disclosure via FlashCopy Manager on Windows, Data Protection for Exchange, and Data Protection for SQL CVE-2015-4949

The password associated with Tivoli Storage Manager or the Microsoft SQL DB user is displayed in plain text via application pop-up messages for failed operations and in application trace output. CVE(s):   CVE-2015-4949 ...

from IBM Product Security Incident Response Team http://ift.tt/1hvzBam