PT-2017-13095 · Vmware+1 · Vmware Vcenter+1

Publicado 2017-10-05 · Atualizado 2019-10-03 · CVE-2017-1378

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1

Description The issue allows a local user to obtain unencrypted login credentials to Vmware vCenter from the application trace output.

Recommendations For IBM Spectrum Protect versions 7.1 through 8.1, consider restricting access to the application trace output to minimize the risk of exploitation.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2017-1378

Produtos afetados

Ibm Spectrum Protect

Vmware Vcenter

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-1378 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-1378 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126875 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=swg22006215 · Aviso do Fabricante