Published: 04/04/2018 Updated: 03/10/2019

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 8.1 | Impact Score: 5.9 | Exploitability Score: 2.2

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to ensure the new password is stored more securely. Products should encourage customers to take this step as a high priority action. IBM X-Force ID: 139972.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ibm spectrum protect for virtual environments
ibm spectrum protect for space management
ibm spectrum protect snapshot

CWE-916 https://exchange.xforce.ibmcloud.com/vulnerabilities/139972 http://www.ibm.com/support/docview.wss?uid=swg22015071 http://www.ibm.com/support/docview.wss?uid=swg22015066 http://www.ibm.com/support/docview.wss?uid=swg22014957 http://www.ibm.com/support/docview.wss?uid=swg22014669 http://www.securitytracker.com/id/1041012 http://www.securityfocus.com/bid/104511 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-1447

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect