7.5

CVE-2018-1785

IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 148870.

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Spectrum Protect Client Version >= 7.1.0.0 <= 7.1.8.3
Ibm ≫ Spectrum Protect Client Version >= 8.1.0.0 <= 8.1.4.1
Ibm ≫ Spectrum Protect For Virtual Environments SwPlatformhyper-v Version >= 7.1.0.0 <= 7.1.8.0
Ibm ≫ Spectrum Protect For Virtual Environments SwPlatformvmware Version >= 7.1.0.0 <= 7.1.8.2
Ibm ≫ Spectrum Protect For Virtual Environments SwPlatformhyper-v Version >= 8.1.0.0 <= 8.1.4.0
Ibm ≫ Spectrum Protect For Virtual Environments SwPlatformvmware Version >= 8.1.0.0 <= 8.1.4.1
Ibm ≫ Spectrum Protect Client Version >= 8.1.0.0 <= 8.1.4.2
   Apple ≫ macOS Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.13% 0.335
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
psirt@us.ibm.com 3.7 2.2 1.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-326 Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

http://www.securitytracker.com/id/1041716
Third Party Advisory
VDB Entry