CVE-2018-1785

🗓️ 26 Sep 2018 15:00:00Reported by ibmType

IBM Tivoli Storage Manager uses weak cryptographic algorithms, allowing attacker to decrypt sensitive info

Reporter	Title	Published	Views	Family All 7
IBM Security Bulletins	Security Bulletin: IBM Spectrum Protect (formerly Tivoli Storage Manager) Client and IBM Spectrum Protect for Virtual Environments allow Triple DES (3DES) ciphers to be used (CVE-2018-1785)	7 Feb 201922:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Protect Server allows Triple DES (3DES) ciphers to be used (CVE-2018-1785)	20 Nov 202023:22	–	ibm
CNVD	Information Disclosure Vulnerability in Multiple IBM Products (CNVD-2018-20095)	27 Sep 201800:00	–	cnvd
Cvelist	CVE-2018-1785	26 Sep 201815:00	–	cvelist
EUVD	EUVD-2018-12364	7 Oct 202500:30	–	euvd
NVD	CVE-2018-1785	26 Sep 201815:29	–	nvd
Prion	Code injection	26 Sep 201815:29	–	prion

NVD

Vulners

Node

ibm spectrum_protect_clientRange7.1.0.0–7.1.8.3

ibm spectrum_protect_clientRange8.1.0.0–8.1.4.1

ibm spectrum_protect_for_virtual_environmentsRange7.1.0.0–7.1.8.0hyper-v

ibm spectrum_protect_for_virtual_environmentsRange7.1.0.0–7.1.8.2vmware

ibm spectrum_protect_for_virtual_environmentsRange8.1.0.0–8.1.4.0hyper-v

ibm spectrum_protect_for_virtual_environmentsRange8.1.0.0–8.1.4.1vmware

Node

ibm spectrum_protect_clientRange8.1.0.0–8.1.4.2

AND

apple macosMatch-

[
  {
    "product": "Spectrum Protect",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.1"
      },
      {
        "status": "affected",
        "version": "8.1"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/docview.wss
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/148870
securitytracker	www.securitytracker.com/id/1041716

21 Nov 2024 04:00Current

7.2High risk

Vulners AI Score7.2

CVSS 25

CVSS 3.17.5

CVSS 33.7

EPSS0.00125

CWE-326