Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2018-1447 Details

Description

The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to ensure the new password is stored more securely. Products should encourage customers to take this step as a high priority action. IBM X-Force ID: 139972.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://exchange.xforce.ibmcloud.com/vulnerabilities/139972 CVEVDB EntryVendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22014669 CVEPatchVendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22014957 CVEPatchVendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22015066 CVEPatchVendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22015071 CVEPatchVendor Advisory

see all 14 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-916Use of Password Hash With Insufficient Computational Effort[email protected]

Affected Products

ProductVersions
ibm spectrum protect for space management
>= 7.1.0.0, <= 7.1.8.1
>= 8.1.0.0, <= 8.1.4.0

CPE

  • cpe:2.3:a:ibm:spectrum_protect_for_space_management:*:*:*:*:*:vmware:*:*

Remediation

  • No remediation found in references.
ibm spectrum protect for virtual environments
>= 7.1.0.0, <= 7.1.8.0
>= 8.1.0.0, <= 8.1.4.0

CPE

  • cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:*:*:*:*:*:vmware:*:*

Remediation

  • No remediation found in references.
ibm spectrum protect snapshot
>= 4.1.0.0, <= 4.1.6.3

CPE

  • cpe:2.3:a:ibm:spectrum_protect_snapshot:*:*:*:*:*:vmware:*:*

Remediation

  • No remediation found in references.

Change History

8 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2018-1447
NVD Published Date:
Apr 4, 2018
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2018-1447 Details - Not Deferred