Lucene search

IbmCVELIST:CVE-2018-1987

HistoryAug 02, 2019 - 2:10 p.m.

CVE-2018-1987

2019-08-0214:10:12

ibm

www.cve.org

CVSS3

5.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

AI Score

7.4

Confidence

High

EPSS

Percentile

12.6%

JSON

IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace file. IBM X-Force ID: 154280.

CNA Affected

[
  {
    "product": "Spectrum Protect for Enterprise Resource Planning",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.1"
      },
      {
        "status": "affected",
        "version": "8.1"
      }
    ]
  }
]

References

www.ibm.com/support/docview.wss?uid=ibm10883782

exchange.xforce.ibmcloud.com/vulnerabilities/154280

CVSS3

5.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

AI Score

7.4

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2018-1987