CVE-2018-1987 MEDIUM

CVE-2018-1987

Vendor Ibm
Product Spectrum Protect for Enterprise Resource Planning
Published August 2, 2019
Last update September 17, 2024

CVSS base score

5.1/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.0/PR:N/S:U/AC:H/I:N/AV:L/UI:N/C:H/A:N/E:U/RL:O/RC:C

What the vulnerability does

01Description

IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace file. IBM X-Force ID: 154280.

Key dates

02Disclosure timeline

August 2, 2019 CVE published
September 17, 2024 Record updated