CVE-2018-1987

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace file. IBM X-Force ID: 154280.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
IBM	Spectrum Protect for Enterprise Resource Planning	7.1; 8.1

References

http://www.ibm.com/support/docview.wss?uid=ibm10883782Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/154280VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10883782Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/154280VDB Entry, Vendor Advisory

Timeline

Published: Aug 2, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-198708.8An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentat CVE-2018-198716.5An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.CVE-2018-198725.5An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.CVE-2018-198739.8An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.CVE-2018-198766.5cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMall CVE-2018-198776.1login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field.CVE-2018-198786.5An issue was discovered on Teltonika RTU950 R_31.04.89 devices. The application allows a user to login without limitation. For every success CVE-2018-198799.8An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89 before R_00.05.00.5 devices. The authentication funct CVE-2018-198815.5In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service (recursive calls followed by a fitz/xml.c fz_xml CVE-2018-198825.5In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to cause a denial of service (href_att NULL poi CVE-2018-198865.5An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29 CVE-2018-198875.5An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29