IBM Spectrum Protect CVE-2018-1882 Local Information Disclosure Vulnerability
BID:107861
CVE-2018-1882 |Info
IBM Spectrum Protect CVE-2018-1882 Local Information Disclosure Vulnerability
| Bugtraq ID: | 107861 |
| Class: | Design Error |
| CVE: |
CVE-2018-1882 |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 02 2019 12:00AM |
| Updated: | Apr 02 2019 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM Spectrum Protect for Virtual Environments 8.1.6 0 IBM Spectrum Protect for Virtual Environments 8.1 0 IBM Spectrum Protect for Virtual Environments 8.1.6.1 IBM Spectrum Protect for Virtual Environments 8.1.4.1 IBM Spectrum Protect for Virtual Environments 8.1.2.0 IBM Spectrum Protect for Virtual Environments 8.1.0.0 IBM Spectrum Protect for Virtual Environments 7.1.8.0 IBM Spectrum Protect for Virtual Environments 7.1.0.0 IBM Spectrum Protect for Virtual Environments 7.1 8.4 IBM Spectrum Protect for Virtual Environments 7.1 8.2 IBM Spectrum Protect for Space Management 8.1.6.1 IBM Spectrum Protect for Space Management 8.1.4.1 IBM Spectrum Protect for Space Management 8.1.2.0 IBM Spectrum Protect for Space Management 8.1.0.0 IBM Spectrum Protect for Space Management 7.1.8.4 IBM Spectrum Protect for Space Management 7.1.8.3 IBM Spectrum Protect for Space Management 7.1.8.2 IBM Spectrum Protect for Space Management 7.1.8.0 IBM Spectrum Protect for Space Management 7.1.0.0 IBM Spectrum Protect Backup-Archive 8.1.6.1 IBM Spectrum Protect Backup-Archive 8.1.0.0 IBM Spectrum Protect Backup-Archive 7.1.8.4 IBM Spectrum Protect Backup-Archive 7.1.0.0 |
| Not Vulnerable: |
IBM Spectrum Protect for Virtual Environments 8.1.7 IBM Spectrum Protect for Virtual Environments 7.1.8.5 IBM Spectrum Protect for Space Management 8.1.7 IBM Spectrum Protect for Space Management 7.1.8.5 IBM Spectrum Protect Backup-Archive 8.1.7 IBM Spectrum Protect Backup-Archive 7.1.8.5 |
Discussion
IBM Spectrum Protect CVE-2018-1882 Local Information Disclosure Vulnerability
IBM Spectrum Protect is prone to local information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.
The following versions of IBM Spectrum Protect are affected:
IBM Spectrum Protect for Space Management 8.1.0.0 through 8.1.6.1 and 7.1.0.0 through 7.1.8.4
IBM Spectrum Protect Backup-Archive 8.1.0.0 through 8.1.6.1 and 7.1.0.0 through 7.1.8.4
IBM Spectrum Protect for Virtual Environments 8.1.0.0 through 8.1.6.1, 7.1.0.0 through 7.1.8.0 and 7.1.0.0 through 7.1 8.4
IBM Spectrum Protect is prone to local information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.
The following versions of IBM Spectrum Protect are affected:
IBM Spectrum Protect for Space Management 8.1.0.0 through 8.1.6.1 and 7.1.0.0 through 7.1.8.4
IBM Spectrum Protect Backup-Archive 8.1.0.0 through 8.1.6.1 and 7.1.0.0 through 7.1.8.4
IBM Spectrum Protect for Virtual Environments 8.1.0.0 through 8.1.6.1, 7.1.0.0 through 7.1.8.0 and 7.1.0.0 through 7.1 8.4
Exploit / POC
IBM Spectrum Protect CVE-2018-1882 Local Information Disclosure Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].