CVE-2018-1768

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus versions 10.1.0 through 10.1.1

Description The issue could disclose sensitive information when an authorized user executes a test operation. The user id and password may be displayed in plain text within an instrumentation log file.

Recommendations For versions 10.1.0 and 10.1.1, consider restricting access to the instrumentation log file to minimize the risk of sensitive information disclosure until a fix is available.