PT-2019-9370 · Ibm · Ibm Tivoli Application Dependency Discovery Manager

Publicado 2019-02-04 · Atualizado 2019-10-09 · CVE-2018-1675

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Application Dependency Discovery Manager versions 7.2.2 through 7.3

Description The issue could expose password hashes stored in system memory on target systems configured to use the affected software.

Recommendations For versions 7.2.2 through 7.3, update to a version that contains a fix for this issue to prevent exposure of password hashes.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-1675

Produtos afetados

Ibm Tivoli Application Dependency Discovery Manager

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-1675 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=ibm10742403 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1675 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/145110 · Aviso do Fabricante