Security Bulletin: Password disclosure via trace log in IBM Spectrum Protect (formerly Tivoli Storage Manager) Server (CVE-2018-1788)

Summary When tracing is enabled, some passwords may be displayed in the IBM Spectrum Protect formerly Tivoli Storage Manager Server trace file. UPDATED 1/16/2019: Changed "First Fixing VRM Level" in Remediation/Fixes table for 8.1 from 8.1.6 to 8.1.6.100 Vulnerability Details CVEID: CVE-2018-1788...

CVE-2018-1788

IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force ID: 148873...