← Back

CVE-2018-1785

nvd nist
Published: Sep 26, 2018Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 148870.

Affected (7)

Ibm
2 products
Spectrum Protect Client
Spectrum Protect For Virtual Environments
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Spectrum Protect Client
From 7.1.0.0 to 7.1.8.3
Spectrum Protect Client
From 8.1.0.0 to 8.1.4.1
Ibm
Spectrum Protect For Virtual Environments
From 7.1.0.0 to 7.1.8.0
Spectrum Protect For Virtual Environments
From 8.1.0.0 to 8.1.4.0
Spectrum Protect For Virtual Environments
From 7.1.0.0 to 7.1.8.2
Spectrum Protect For Virtual Environments
From 8.1.0.0 to 8.1.4.1
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Spectrum Protect Client
From 8.1.0.0 to 8.1.4.2
Running on/withPlatform Versions
Apple
Macos
All versions

Related CWEs

CWE-326
Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (6)

Source: psirt@us.ibm.com
Vendor Advisory
Source: psirt@us.ibm.com
Third Party AdvisoryVDB Entry
Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory

Timeline

No history available yet.