CVE-2018-1675

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memory on target systems that are configured to use TADDM. IBM X-Force ID: 145110.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
IBM	Tivoli Application Dependency Discovery Manager	7.2.2; 7.3

References

http://www.ibm.com/support/docview.wss?uid=ibm10742403Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/145110VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10742403Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/145110VDB Entry, Vendor Advisory

Timeline

Published: Feb 4, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-167506.5In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found.CVE-2018-167528.8LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feat CVE-2018-167585.9Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the CVE-2018-167596.1The removeXSS function in App/Common/common.php (called from App/Modules/Index/Action/SearchAction.class.php) in EasyCMS v1.4 allows XSS via CVE-2018-16766.1IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr CVE-2018-167616.1Eventum before 3.4.0 has an open redirect vulnerability.CVE-2018-167629.8FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages/items.CVE-2018-167639.8FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth R CVE-2018-167648.8In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or poss CVE-2018-167658.8In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or poss CVE-2018-167668.8In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or poss CVE-2018-167678.8In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or poss