IBM Tivoli Netcool Impact versions 7.1.0.0 through 7.1.0.37 store sensitive information within log files that are readable by any local user. This flaw allows any user who can launch the application locally to view confidential data written to the logs. The weakness corresponds to CWE‑532, which concerns insecure storage of sensitive information.

The affected product is IBM Tivoli Netcool Impact, with affected releases ranging from 7.1.0.0 up to and including 7.1.0.37. Versions 7.1.0.38 and later contain the remediation and are not impacted.

The vulnerability carries a CVSS score of 8.4, indicating a high severity. EPSS information is unavailable and the flaw is not listed in the CISA KEV catalog, suggesting limited evidence of active exploitation. Attack requires local user privileges to read log files; once local access is achieved, the attack can be executed with minimal effort.