IBM Security Bulletin: Password disclosure via instrumentation log file in IBM Spectrum Protect Plus (CVE-2018-1768)
IBM Spectrum Protect Plus may display the user id and password in plain text within the instrumentation log file.
CVE(s): CVE-2018-1768
Affected product(s) and affected version(s):
IBM Spectrum Protect Plus 10.1.0 and 10.1.1.
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10729219
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148622
The post IBM Security Bulletin: Password disclosure via instrumentation log file in IBM Spectrum Protect Plus (CVE-2018-1768) appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team https://ift.tt/2Ic6JTp