Default credentials

IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a test operation, the user id an password may be displayed in plain text within an instrumentation log file. IBM X-Force ID: 148622...

CVE-2018-1545

IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 142649...

CVE-2018-1550

IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other users. IBM X-Force ID: 142696...

CVE-2018-1768

IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a test operation, the user id an password may be displayed in plain text within an instrumentation log file. IBM X-Force ID: 148622...

Code injection

IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other users. IBM X-Force ID: 142696...

CVE-2018-1545

IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 142649...

CVE-2018-1550

IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other users. IBM X-Force ID: 142696...

CVE-2018-1768

IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a test operation, the user id an password may be displayed in plain text within an instrumentation log file. IBM X-Force ID: 148622...

CVE-2018-1545

The CVE-2018-1545 issue affects IBM Spectrum Protect family (IBM Spectrum Protect Client and IBM Spectrum Protect for Virtual Environments) where legacy SSL/TLS protocols and weak ciphers could allow decryption of highly sensitive data. The IBM security bulletin clarifies affected versions: Clien...

CVE-2018-1550

IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other users. IBM X-Force ID: 142696...

CVE-2018-1785

IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 148870...

CVE-2018-1768

IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a test operation, the user id an password may be displayed in plain text within an instrumentation log file. IBM X-Force ID: 148622...

CVE-2018-1768

IBM Spectrum Protect Plus 10.1.0 and 10.1.1 are affected by CVE-2018-1768, which can disclose user IDs and passwords in plain text within an instrumentation log file when an authorized user runs a test operation. The root cause is sensitive credentials being written to logs. Affected platforms in...

CVE-2018-1550

CVE-2018-1550 affects IBM Spectrum Protect family (Client, Data Protection for VMware, Space Management). The IBM bulletin confirms a local-access vulnerability where a local user could corrupt or delete highly sensitive information, leading to a denial of service for other users. Affected versio...

CVE-2018-1545: Inadequate Encryption Strength

IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 142649...

PT-2018-14222

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager IBM Spectrum Protect versions 7.1 and 8.1 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt sensitive information. Recommendations...

PT-2018-14155

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus versions 10.1.0 through 10.1.1 Description The issue could disclose sensitive information when an authorized user executes a test operation. The user id and password may be displayed in plain text within an...

PT-2018-13034

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager IBM Spectrum Protect versions 7.1 and 8.1 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information...

CVE-2018-1785: Inadequate Encryption Strength

IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 148870...

PT-2018-13059

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1 Description The issue could allow a local user to corrupt or delete highly sensitive information, resulting in a denial of service to other users. Recommendations For IBM Spectrum Protect versions...