PT-2019-9641
CVE-2018-1882
·
Published
2019-04-08
·
Updated
2022-04-11
Description by
CVSS 3.1
4.7
MediumMetricsAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Spectrum Protect versions 7.1 through 8.1
Description
The issue concerns the potential display of the node password in plain text within the client trace file of IBM Spectrum Protect, under specific atypical configurations.
Recommendations
For IBM Spectrum Protect versions 7.1 through 8.1, consider restricting access to the client trace file to minimize the risk of password exposure until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾