CVE-2018-1447

The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to ensure the new password is stored more securely. Products should encourage customers to take this step as a high priority action. IBM X-Force ID: 139972.

CVSS v3 8.1 HIGH
CVSS v2.0 5.0 MEDIUM

8.1^/10

CVSS v3 : HIGH

Vector : AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.ibm.com/support/docview.wss?uid=swg22014669	Patch Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22014957	Patch Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22015066	Vendor Advisory Patch
http://www.ibm.com/support/docview.wss?uid=swg22015071	Patch Vendor Advisory
http://www.securityfocus.com/bid/104511
http://www.securitytracker.com/id/1041012
https://exchange.xforce.ibmcloud.com/vulnerabilities/139972	VDB Entry Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:spectrum_protect_for_space_management::::::vmware::*
	cpe:2.3:a:ibm:spectrum_protect_for_space_management::::::vmware::*
	cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments::::::vmware::*
	cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments::::::vmware::*

Configuration 2 (hide)

cpe:2.3:a:ibm:spectrum_protect_snapshot:*:*:*:*:*:vmware:*:*

History

No history.

Information

Published : 2018-04-04 18:29

Updated : 2019-10-03 00:03

NVD link : CVE-2018-1447

Mitre link : CVE-2018-1447

CVE.ORG link : CVE-2018-1447

JSON object : View

Products Affected

ibm

spectrum_protect_for_virtual_environments
spectrum_protect_snapshot
spectrum_protect_for_space_management

CWE

CWE-916

Use of Password Hash With Insufficient Computational Effort

{"id": "CVE-2018-1447", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}, {"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.4}]}, "published": "2018-04-04T18:29:02.293", "references": [{"url": "http://www.ibm.com/support/docview.wss?uid=swg22014669", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg22014957", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg22015066", "tags": ["Vendor Advisory", "Patch"], "source": "psirt@us.ibm.com"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg22015071", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.securityfocus.com/bid/104511", "source": "psirt@us.ibm.com"}, {"url": "http://www.securitytracker.com/id/1041012", "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/139972", "tags": ["VDB Entry", "Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-916"}]}], "descriptions": [{"lang": "en", "value": "The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to ensure the new password is stored more securely. Products should encourage customers to take this step as a high priority action. IBM X-Force ID: 139972."}, {"lang": "es", "value": "La l\u00f3gica KDB de GSKit (IBM Spectrum Protect 7.1 y 7.2) y CMS (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4 y 4.1.6) no a\u00f1ade sal a la funci\u00f3n del hash, por lo que resulta en una protecci\u00f3n de contrase\u00f1as m\u00e1s d\u00e9bil de lo esperado. Podr\u00eda recuperarse una contrase\u00f1a d\u00e9bil. Nota: Tras actualizar, el cliente deber\u00eda cambiar la contrase\u00f1a para asegurarse de que la nueva contrase\u00f1a se almacena de forma m\u00e1s segura. Los productos deber\u00edan animar a los clientes a considerar este paso como muy prioritario. IBM X-Force ID: 139972."}], "lastModified": "2019-10-03T00:03:26.223", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:spectrum_protect_for_space_management:*:*:*:*:*:vmware:*:*", "vulnerable": true, "matchCriteriaId": "31FC674F-3915-4979-B51C-14A148CEA4DF", "versionEndIncluding": "7.1.8.1", "versionStartIncluding": "7.1.0.0"}, {"criteria": "cpe:2.3:a:ibm:spectrum_protect_for_space_management:*:*:*:*:*:vmware:*:*", "vulnerable": true, "matchCriteriaId": "793BB1A2-3389-4A33-BA0B-4D4DC250C4EA", "versionEndIncluding": "8.1.4.0", "versionStartIncluding": "8.1.0.0"}, {"criteria": "cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:*:*:*:*:*:vmware:*:*", "vulnerable": true, "matchCriteriaId": "49B34B53-BB27-41EC-8C37-6643F756DD6C", "versionEndIncluding": "7.1.8.0", "versionStartIncluding": "7.1.0.0"}, {"criteria": "cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:*:*:*:*:*:vmware:*:*", "vulnerable": true, "matchCriteriaId": "7F3049C6-8148-43CF-BB95-FEDED00F4D67", "versionEndIncluding": "8.1.4.0", "versionStartIncluding": "8.1.0.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:spectrum_protect_snapshot:*:*:*:*:*:vmware:*:*", "vulnerable": true, "matchCriteriaId": "F7348DFA-F928-4A84-867B-966752268882", "versionEndIncluding": "4.1.6.3", "versionStartIncluding": "4.1.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}