PT-2017-13095 · Vmware+1 · Vmware Vcenter+1

Published 2017-10-05 · Updated 2019-10-03 · CVE-2017-1378

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1

Description The issue allows a local user to obtain unencrypted login credentials to Vmware vCenter from the application trace output.

Recommendations For IBM Spectrum Protect versions 7.1 through 8.1, consider restricting access to the application trace output to minimize the risk of exploitation.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2017-1378

Affected Products

Ibm Spectrum Protect

Vmware Vcenter

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-1378 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1378 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126875 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=swg22006215 · Vendor Advisory