CVE-2018-1882

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 08-04-2019 05:29

Last modified: - 11-04-2022 10:38

Total changes: - 5

Description

In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file. IBM X-Force ID: 151968.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

High

Attack complexity

Local

Attack vector

None

Availability

High

Confidentiality

None

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

4.7

Base score

1.0

3.6

Exploitability score

Impact score

Verification logic

AND

vendor=ibm AND product=spectrum_protect_backup-archive_client AND versionEndIncluding=8.1.6.1 AND versionStartIncluding=8.1.0.0

vendor=ibm AND product=spectrum_protect_backup-archive_client AND versionEndIncluding=7.1.8.4 AND versionStartIncluding=7.1.0.0

vendor=ibm AND product=aix AND version=-

vendor=apple AND product=macos AND version=-

vendor=microsoft AND product=windows AND version=-

vendor=oracle AND product=solaris AND version=-

vendor=linux AND product=linux_kernel AND version=-

AND

vendor=ibm AND product=spectrum_protect_for_virtual_environments AND target_software=vmware AND versionEndIncluding=7.1.8.4 AND versionStartIncluding=7.1.0.0

vendor=ibm AND product=spectrum_protect_for_virtual_environments AND target_software=vmware AND versionEndIncluding=8.1.6.1 AND versionStartIncluding=8.1.0.0

vendor=linux AND product=linux_kernel AND version=-

vendor=microsoft AND product=windows AND version=-

AND

vendor=ibm AND product=spectrum_protect_for_virtual_environments AND target_software=hyper-v AND versionEndIncluding=8.1.6.1 AND versionStartIncluding=8.1.0.0

vendor=ibm AND product=spectrum_protect_for_virtual_environments AND target_software=hyper-v AND versionEndIncluding=7.1.8.0 AND versionStartIncluding=7.1.0.0

vendor=microsoft AND product=windows AND version=-

Reference

ibm-spectrum-cve20181882-info-disc (151968)-Vendor Advisory, VDB Entry
http://www.ibm.com/support/docview.wss?uid=ibm10869436
http://www.ibm.com/support/docview.wss?uid=ibm10869208
107861-Broken Link

Keywords

CVE-2018-1882

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2018-1882

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures