CVE-2018-1882
First published: Mon Apr 08 2019(Updated: )
In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file. IBM X-Force ID: 151968.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Spectrum Protect Backup-Archive Client | >=7.1.0.0<=7.1.8.4 | |
| IBM Spectrum Protect Backup-Archive Client | >=8.1.0.0<=8.1.6.1 | |
| Apple macOS | ||
| IBM AIX | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Oracle Solaris | ||
| Ibm Spectrum Protect For Virtual Environments | >=7.1.0.0<=7.1.8.4 | |
| Ibm Spectrum Protect For Virtual Environments | >=8.1.0.0<=8.1.6.1 | |
| Ibm Spectrum Protect For Virtual Environments | >=7.1.0.0<=7.1.8.0 | |
| Ibm Spectrum Protect For Virtual Environments | >=8.1.0.0<=8.1.6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-1882?
The severity of CVE-2018-1882 is medium with a severity value of 4.7.
What software is affected by CVE-2018-1882?
IBM Spectrum Protect Backup-Archive Client versions 7.1.0.0 to 7.1.8.4 and versions 8.1.0.0 to 8.1.6.1 are affected.
How can the node password be displayed in plain text?
The node password can be displayed in plain text in the IBM Spectrum Protect client trace file in certain atypical configurations.
Is Apple macOS vulnerable to CVE-2018-1882?
No, Apple macOS is not vulnerable to CVE-2018-1882.
Is there a fix available for CVE-2018-1882?
Yes, IBM has provided fixes for the affected versions of IBM Spectrum Protect Backup-Archive Client.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm spectrum protect backup-archive client
- version/ibm spectrum protect backup-archive client/7.1.0.0
- version/ibm spectrum protect backup-archive client/7.1.8.4
- version/ibm spectrum protect backup-archive client/8.1.0.0
- version/ibm spectrum protect backup-archive client/8.1.6.1
- vendor/apple
- canonical/apple macos
- canonical/ibm aix
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/oracle
- canonical/oracle solaris
- canonical/ibm spectrum protect for virtual environments
- version/ibm spectrum protect for virtual environments/7.1.0.0
- version/ibm spectrum protect for virtual environments/7.1.8.4
- version/ibm spectrum protect for virtual environments/8.1.0.0
- version/ibm spectrum protect for virtual environments/8.1.6.1
- version/ibm spectrum protect for virtual environments/7.1.8.0