CVE Vulnerabilities

CVE-2018-1987

Improper Authentication

Published: Aug 02, 2019 | Modified: Mar 31, 2023
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
1.9 LOW
AV:L/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace file. IBM X-Force ID: 154280.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Data_protection Ibm 7.1.3.0 (including) 7.1.3.1 (including)
Data_protection Ibm 8.1.0.0 (including) 8.1.4.0 (including)
Data_protection Ibm 8.1.0.0 (including) 8.1.6.0 (including)

Potential Mitigations

References