CVE-2018-1788

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force ID: 148873.

Metrics

CVSS 3.0 4.4/10CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

Vendor	Product	Versions
IBM	Spectrum Protect	7.1; 8.1

References

http://www.ibm.com/support/docview.wss?uid=ibm10730357Patch, Vendor Advisory
http://www.securityfocus.com/bid/105818Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1042032Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/148873VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10730357Patch, Vendor Advisory
http://www.securityfocus.com/bid/105818Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1042032Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/148873VDB Entry, Vendor Advisory

Timeline

Published: Nov 2, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-178807.5On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 RunReboot commands without authentication to trigger a reboot CVE-2018-178819.8On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger CVE-2018-178827.5An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBotsBattle (CBTB), an Et CVE-2018-178836.1An issue was discovered in Open Ticket Request System (OTRS) 6.0.x before 6.0.12. An attacker could send an e-mail message with a malicious CVE-2018-178846.1XSS exists in admin/gb-dashboard-widget.php in the Gwolle Guestbook (gwolle-gb) plugin before 2.5.4 for WordPress via the PATH_INFO to wp-ad CVE-2018-178865.4An issue was discovered in JEESNS 1.3. The XSS filter in com.lxinet.jeesns.core.utils.XssHttpServletRequestWrapper.java could be bypassed, a CVE-2018-178889.8NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active CVE-2018-178895.3In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsing project files, the CVE-2018-17899.9IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request for CVE-2018-178909.8NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, which could allow arb CVE-2018-178913.7Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream se CVE-2018-178928.8NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard account security featu