PT-2019-2035

Name of the Vulnerable Software and Affected Versions Spectrum Power 4 with Web Office Portal affected versions not specified Description A security issue has been identified that allows an attacker with network access to the web server on port 80/TCP or 443/TCP to execute system commands with...

CVE-2018-1787

IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872...

CVE-2018-1853

IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch...

Cross site scripting

IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872...

Design/Logic Flaw

In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file. IBM X-Force ID: 151968...

CVE-2018-1882

In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file. IBM X-Force ID: 151968...

CVE-2018-1787

IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872...

CVE-2018-1882

In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file. IBM X-Force ID: 151968...

CVE-2018-1853

IBM Spectrum Protect (formerly Tivoli Storage Manager) Backup-Archive Client is affected by CVE-2018-1853, a clickjacking vulnerability in the Client Web Interface. A remote attacker could lure a victim to a malicious site to hijack the victim’s click actions, with the potential for further abuse...

CVE-2018-1882

CVE-2018-1882 affects IBM Spectrum Protect family in atypical configurations where enabling tracing exposes the node password in plain text within the IBM Spectrum Protect client trace file. Affected products and versions include: Backup-Archive Client (8.1.0.0–8.1.6.1 and 7.1.0.0–7.1.8.4), Data ...

CVE-2018-1882

In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file. IBM X-Force ID: 151968...

CVE-2018-1787

CVE-2018-1787 affects IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments on Windows. The root cause is insecure file permissions that expose passwords. Affected products/versions include Backup-Archive Client 7.1.x (7.1.8.0–7.1.8.4) and 8.1.x (8.1.2.0–8.1...

CVE-2018-1787

IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872...

IBM Spectrum Protect Clickjacking Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from IBM in the United States. The platform provides organizations with a single point of control and management, and supports backup and recovery for virtual, physical and cloud environments of...

IBM Spectrum ProteIBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments Information Disclosure Vulnerability

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments are both products of IBM Corporation.IBM Spectrum Protect Backup-Archive Client is a set of client programs for IBM Spectrum Protect file backup, archiving. IBM Spectrum Protect Backup-Archive Client is a...

PT-2019-9641

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1 Description The issue concerns the potential display of the node password in plain text within the client trace file of IBM Spectrum Protect, under specific atypical configurations. Recommendations...

PT-2019-9529

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1 Description The issue is caused by insecure file permissions, leading to a password exposure. Recommendations For IBM Spectrum Protect versions 7.1 through 8.1, update the file permissions to secur...

CVE-2018-1787: Incorrect Permission Assignment for Critical Resource

IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872...

CVE-2018-1882: Cleartext Storage of Sensitive Information

In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file. IBM X-Force ID: 151968...

CVE-2018-1853: Improper Restriction of Rendered UI Layers or Frames

IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch...