IBM Security Bulletin: Password disclosure via trace log in IBM Spectrum Protect (formerly Tivoli Storage Manager) Server (CVE-2018-1788)

Nov 1, 2018 9:01 am EDT

Categorized: Medium Severity

Share this post:

When tracing is enabled, some passwords may be displayed in the IBM Spectrum Protect (formerly Tivoli Storage Manager) Server trace file.

CVE(s): CVE-2018-1788

Affected product(s) and affected version(s):

This vulnerability affects the following IBM Spectrum Protect (formerly Tivoli Storage Manager) Server levels:

• 8.1.0.0 through 8.1.5.x
• 7.1.0.0 through 7.1.9.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10730357
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148873

from IBM Product Security Incident Response Team https://ift.tt/2QbHoMi