Security Bulletin: Potential password exposure in IBM Spectrum Protect (formerly Tivoli Storage Manger) Server (CVE-2017-1339)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Server may use a weak algorithm for encrypting passwords. Vulnerability Details CVEID: CVE-2017-1339 DESCRIPTION: IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager Server uses weak encryption for the password. A...

CVE-2017-1339

IBM Spectrum Protect Server (formerly Tivoli Storage Manager) 7.1 and 8.1 uses weak password encryption, allowing potential decryption of client/administrator passwords and leading to information disclosure or denial of service. Affected: 8.1.0.0–8.1.1.x; 7.1.0.0–7.1.7.x; 6.3 and below (EOS). Rem...