Not rated
CVE-2017-1378 IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware…
Description
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Protect for Virtual Environments | 8.1 | No fix stated |
| Spectrum Protect for Virtual Environments | 7.1 | No fix stated |
Other CVEs of Spectrum Protect for Virtual Environments
The 4 CVEs of Spectrum Protect for Virtual Environments →
CVE-2021-20532
IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their privileges to take…
7.4
High
CVE-2018-2025
IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates…
5.1
Medium
CVE-2018-1447
The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic…
5.1
Medium