High severity · published Apr 4, 2018
CVE-2018-1447
The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than…
8.1
CVSS
0.9%
EPSS
No
On KEV
Description
The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to ensure the new password is stored more securely. Products should encourage customers to take this step as a high priority action. IBM X-Force ID: 139972.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SP
Spectrum Protect For Space Management · Ibm
7.1.0.0 through 7.1.8.1; 8.1.0.0 through 8.1.4.0 · source: NVD
SP
Spectrum Protect For Virtual Environments · Ibm
7.1.0.0 through 7.1.8.0; 8.1.0.0 through 8.1.4.0 · source: NVD
SP
Spectrum Protect Snapshot · Ibm
4.1.0.0 through 4.1.6.3 · source: NVD
Affected product
SP
Spectrum Protect For Space Management
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-1447
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-1447
Patch
http://www.ibm.com/support/docview.wss?uid=swg22014669
Patch
http://www.ibm.com/support/docview.wss?uid=swg22014957
Patch
http://www.ibm.com/support/docview.wss?uid=swg22015066
Patch
http://www.ibm.com/support/docview.wss?uid=swg22015071
www.securityfocus.com
http://www.securityfocus.com/bid/104511
www.securitytracker.com
http://www.securitytracker.com/id/1041012
More from Spectrum Protect For Space Management
7.8
CVE-2021-29672
IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings
7.5
CVE-2020-4494
IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1…
5.5
CVE-2021-39048
IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking
5.5
CVE-2021-20546
IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking
5.4
CVE-2020-4406
IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1…