{"id":"CVE-2018-1987","state":"PUBLISHED","title":"IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace f","description":"IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace file. IBM X-Force ID: 154280.","publishedAt":"2019-08-02T14:10:12.747Z","updatedAt":"2024-09-17T02:52:22.207Z","severity":{"score":5.1,"label":"Medium","version":"3.0","vector":"CVSS:3.0/PR:N/S:U/AC:H/I:N/AV:L/UI:N/C:H/A:N/E:U/RL:O/RC:C","source":"ibm"},"assigner":"ibm","products":["IBM Spectrum Protect for Enterprise Resource Planning"],"affected":[{"vendor":"IBM","product":"Spectrum Protect for Enterprise Resource Planning","versions":[{"version":"7.1","status":"affected"},{"version":"8.1","status":"affected"}]}],"references":["http://www.ibm.com/support/docview.wss?uid=ibm10883782","https://exchange.xforce.ibmcloud.com/vulnerabilities/154280"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:36.861Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/1xxx/CVE-2018-1987.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-1987","state":"PUBLISHED","datePublished":"2019-08-02T14:10:12.747Z","dateUpdated":"2024-09-17T02:52:22.207Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2017-12-13T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace file. IBM X-Force ID: 154280."}],"affected":[{"vendor":"IBM","product":"Spectrum Protect for Enterprise Resource Planning","versions":[{"version":"7.1","status":"affected"},{"version":"8.1","status":"affected"}]}],"references":[{"url":"http://www.ibm.com/support/docview.wss?uid=ibm10883782","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/154280","name":"ibm-tivoli-cve20181987-info-disc (154280)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"NONE","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":4.5,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.0/PR:N/S:U/AC:H/I:N/AV:L/UI:N/C:H/A:N/E:U/RL:O/RC:C","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2019-08-02T14:10:12.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2019-07-31T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2019-07-31T00:00:00","ID":"CVE-2018-1987","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Spectrum Protect for Enterprise Resource Planning","version":{"version_data":[{"version_value":"7.1"},{"version_value":"8.1"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace file. IBM X-Force ID: 154280."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"H","AV":"L","C":"H","I":"N","PR":"N","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"http://www.ibm.com/support/docview.wss?uid=ibm10883782","refsource":"CONFIRM","title":"IBM Security Bulletin 883782 (Spectrum Protect for Enterprise Resource Planning)","url":"http://www.ibm.com/support/docview.wss?uid=ibm10883782"},{"name":"ibm-tivoli-cve20181987-info-disc (154280)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/154280"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.ibm.com/support/docview.wss?uid=ibm10883782","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/154280","name":"ibm-tivoli-cve20181987-info-disc (154280)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T04:14:39.557Z"}}]}}}