PT-2019-9939 · Ibm · Ibm Spectrum Protect

Published 2019-08-02 · Updated 2023-03-31 · CVE-2018-1987

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect for Enterprise Resource Planning versions 7.1 through 8.1

Description The issue concerns the potential display of the IBM Spectrum Protect node password in plain text within the ERP trace file when tracing is activated.

Recommendations For versions 7.1 through 8.1, deactivate tracing to prevent the IBM Spectrum Protect node password from being displayed in plain text in the ERP trace file.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2018-1987

Affected Products

Ibm Spectrum Protect

References · 4

• https://osv.dev/vulnerability/CVE-2018-1987 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=ibm10883782 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/154280 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1987 · Security Note