PT-2018-14155 · Ibm · Ibm Spectrum Protect Plus

Publicado 2018-09-26 · Atualizado 2019-10-09 · CVE-2018-1768

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus versions 10.1.0 through 10.1.1

Description The issue could disclose sensitive information when an authorized user executes a test operation. The user id and password may be displayed in plain text within an instrumentation log file.

Recommendations For versions 10.1.0 and 10.1.1, consider restricting access to the instrumentation log file to minimize the risk of sensitive information disclosure until a fix is available.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2018-1768

Produtos afetados

Ibm Spectrum Protect Plus

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/148622 · Aviso do Fabricante
• http://securitytracker.com/id/1041715 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-1768 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1768 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=ibm10729219 · Aviso do Fabricante