High severity · published Aug 2, 2019
CVE-2018-1987
IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace…
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace file. IBM X-Force ID: 154280.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DP
Data Protection · Ibm
7.1.3.0 through 7.1.3.1; 7.1.3.0 through 7.1.3.1; 7.1.3.0 through 7.1.3.1; 8.1.0.0 through 8.1.4.0; 8.1.0.0 through 8.1.4.0; 8.1.0.0 through 8.1.6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-1987
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-1987
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10883782
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/154280
More from Data Protection
–
CVE-2013-3976
The (1) Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the (2) FlashCopy Manager for Exchange component…