CVE-2018-1768: High severity ibm storage protect plus vulnerability

Published Sep 26, 2018

Updated

IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a test operation, the user id an password may be displayed in plain text within an instrumentation log file. IBM X-Force ID: 148622.

Affected Software

2 affected components

IBM Spectrum Protect Plus=10.1.0

IBM Spectrum Protect Plus=10.1.1

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=ibm10729219

Event History

Sep 26, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1768?

CVE-2018-1768 has a medium severity rating due to its potential to expose sensitive user credentials.

How do I fix CVE-2018-1768?

To mitigate CVE-2018-1768, it is recommended to upgrade IBM Spectrum Protect Plus to a version that does not contain this vulnerability.

Who is affected by CVE-2018-1768?

CVE-2018-1768 affects users of IBM Spectrum Protect Plus versions 10.1.0 and 10.1.1.

What impact does CVE-2018-1768 have on users?

CVE-2018-1768 may result in unauthorized disclosure of user IDs and passwords in plain text within log files.

What versions of IBM Spectrum Protect Plus are vulnerable to CVE-2018-1768?

IBM Spectrum Protect Plus versions 10.1.0 and 10.1.1 are vulnerable to CVE-2018-1768.