{"api_version":"1","generated_at":"2026-07-23T20:47:19+00:00","cve":"CVE-2018-1987","urls":{"html":"https://cve.report/CVE-2018-1987","api":"https://cve.report/api/cve/CVE-2018-1987.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2018-1987","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-1987"},"summary":{"title":"CVE-2018-1987","description":"IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace file. IBM X-Force ID: 154280.","state":"PUBLIC","assigner":"psirt@us.ibm.com","published_at":"2019-08-02 14:15:00","updated_at":"2023-03-31 15:59:00"},"problem_types":["CWE-287"],"metrics":[],"references":[{"url":"http://www.ibm.com/support/docview.wss?uid=ibm10883782","name":"http://www.ibm.com/support/docview.wss?uid=ibm10883782","refsource":"CONFIRM","tags":["Vendor Advisory"],"title":"Security Bulletin: Password disclosure via application trace affects IBM Spectrum Protect for Enterprise Resource Planning (CVE-2018-1987)","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/154280","name":"ibm-tivoli-cve20181987-info-disc (154280)","refsource":"XF","tags":["VDB Entry","Vendor Advisory"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1987","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1987","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2018","cve_id":"1987","vulnerable":"1","versionEndIncluding":"7.1.3.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"data_protection","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"sap_for_db2","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"1987","vulnerable":"1","versionEndIncluding":"7.1.3.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"data_protection","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"sap_for_oracle","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"1987","vulnerable":"1","versionEndIncluding":"7.1.3.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"data_protection","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"sap_hana","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"1987","vulnerable":"1","versionEndIncluding":"8.1.4.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"data_protection","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"sap_for_db2","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"1987","vulnerable":"1","versionEndIncluding":"8.1.4.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"data_protection","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"sap_for_oracle","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"1987","vulnerable":"1","versionEndIncluding":"8.1.6.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"data_protection","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"sap_hana","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"impact":{"cvssv3":{"BM":{"PR":"N","S":"U","AC":"H","I":"N","AV":"L","UI":"N","C":"H","SCORE":"5.100","A":"N"},"TM":{"E":"U","RL":"O","RC":"C"}}},"data_type":"CVE","data_format":"MITRE","description":{"description_data":[{"lang":"eng","value":"IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace file. IBM X-Force ID: 154280."}]},"problemtype":{"problemtype_data":[{"description":[{"value":"Obtain Information","lang":"eng"}]}]},"data_version":"4.0","CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","STATE":"PUBLIC","DATE_PUBLIC":"2019-07-31T00:00:00","ID":"CVE-2018-1987"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"version":{"version_data":[{"version_value":"7.1"},{"version_value":"8.1"}]},"product_name":"Spectrum Protect for Enterprise Resource Planning"}]},"vendor_name":"IBM"}]}},"references":{"reference_data":[{"name":"http://www.ibm.com/support/docview.wss?uid=ibm10883782","refsource":"CONFIRM","title":"IBM Security Bulletin 883782 (Spectrum Protect for Enterprise Resource Planning)","url":"http://www.ibm.com/support/docview.wss?uid=ibm10883782"},{"refsource":"XF","name":"ibm-tivoli-cve20181987-info-disc (154280)","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/154280","title":"X-Force Vulnerability Report"}]}},"nvd":{"publishedDate":"2019-08-02 14:15:00","lastModifiedDate":"2023-03-31 15:59:00","problem_types":["CWE-287"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"severity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:data_protection:*:*:*:*:*:sap_for_db2:*:*","versionStartIncluding":"7.1.3.0","versionEndIncluding":"7.1.3.1","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:data_protection:*:*:*:*:*:sap_for_oracle:*:*","versionStartIncluding":"7.1.3.0","versionEndIncluding":"7.1.3.1","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:data_protection:*:*:*:*:*:sap_hana:*:*","versionStartIncluding":"7.1.3.0","versionEndIncluding":"7.1.3.1","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:data_protection:*:*:*:*:*:sap_for_oracle:*:*","versionStartIncluding":"8.1.0.0","versionEndIncluding":"8.1.4.0","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:data_protection:*:*:*:*:*:sap_for_db2:*:*","versionStartIncluding":"8.1.0.0","versionEndIncluding":"8.1.4.0","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:data_protection:*:*:*:*:*:sap_hana:*:*","versionStartIncluding":"8.1.0.0","versionEndIncluding":"8.1.6.0","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2018","CveId":"1987","Ordinal":"117511","Title":"CVE-2018-1987","CVE":"CVE-2018-1987","Year":"2018"},"notes":[{"CveYear":"2018","CveId":"1987","Ordinal":"1","NoteData":"IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace file. IBM X-Force ID: 154280.","Type":"Description","Title":null},{"CveYear":"2018","CveId":"1987","Ordinal":"2","NoteData":"2019-08-02","Type":"Other","Title":"Published"},{"CveYear":"2018","CveId":"1987","Ordinal":"3","NoteData":"2019-08-02","Type":"Other","Title":"Modified"}]}}}