Vulnerability-Lookup

CNVD-2018-22374

Vulnerability from cnvd - Published: 2018-11-03

Title

IBM Spectrum Protect和Spectrum Protect Snapshot中的GSKit组件存在信任管理漏洞

Description

IBM Spectrum Protect和Spectrum Protect Snapshot都是美国IBM公司的产品。IBM Spectrum Protect是一套数据保护平台，它为企业提供单一控制和管理点，并支持对所有规模的虚拟、物理和云环境进行备份和恢复。Spectrum Protect Snapshot是一套使用高级快照技术进行数据备份和还原的软件。GSKit是其中的一套安全管理工具。 IBM Spectrum Protect和Spectrum Protect Snapshot中的GSKit组件存在信任管理漏洞。该漏洞源于CMS KDB逻辑使用了较弱的密码保护。攻击者可利用该漏洞恢复密码。

Severity

中

Patch Name

IBM Spectrum Protect和Spectrum Protect Snapshot中的GSKit组件存在信任管理漏洞的补丁

Patch Description

Formal description

目前厂商已更新补丁，请相关用户及时下载补丁更新： http://www-01.ibm.com/support/docview.wss?uid=swg21984819

Reference

https://www.securityfocus.com/bid/104511,https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1447

Impacted products

Name
['IBM Spectrum Protect 7.1', 'IBM Spectrum Protect 7.2', 'IBM Spectrum Protect Snapshot 4.1.3', 'IBM Spectrum Protect Snapshot 4.1.4', 'IBM Spectrum Protect Snapshot 4.1.6']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "104511"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-1447"
    }
  },
  "description": "IBM Spectrum Protect\u548cSpectrum Protect Snapshot\u90fd\u662f\u7f8e\u56fdIBM\u516c\u53f8\u7684\u4ea7\u54c1\u3002IBM Spectrum Protect\u662f\u4e00\u5957\u6570\u636e\u4fdd\u62a4\u5e73\u53f0\uff0c\u5b83\u4e3a\u4f01\u4e1a\u63d0\u4f9b\u5355\u4e00\u63a7\u5236\u548c\u7ba1\u7406\u70b9\uff0c\u5e76\u652f\u6301\u5bf9\u6240\u6709\u89c4\u6a21\u7684\u865a\u62df\u3001\u7269\u7406\u548c\u4e91\u73af\u5883\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d\u3002Spectrum Protect Snapshot\u662f\u4e00\u5957\u4f7f\u7528\u9ad8\u7ea7\u5feb\u7167\u6280\u672f\u8fdb\u884c\u6570\u636e\u5907\u4efd\u548c\u8fd8\u539f\u7684\u8f6f\u4ef6\u3002GSKit\u662f\u5176\u4e2d\u7684\u4e00\u5957\u5b89\u5168\u7ba1\u7406\u5de5\u5177\u3002\r\n\r\nIBM Spectrum Protect\u548cSpectrum Protect Snapshot\u4e2d\u7684GSKit\u7ec4\u4ef6\u5b58\u5728\u4fe1\u4efb\u7ba1\u7406\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8eCMS KDB\u903b\u8f91\u4f7f\u7528\u4e86\u8f83\u5f31\u7684\u5bc6\u7801\u4fdd\u62a4\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6062\u590d\u5bc6\u7801\u3002",
  "discovererName": "IBM",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u66f4\u65b0\u8865\u4e01\uff0c\u8bf7\u76f8\u5173\u7528\u6237\u53ca\u65f6\u4e0b\u8f7d\u8865\u4e01\u66f4\u65b0\uff1a\r\nhttp://www-01.ibm.com/support/docview.wss?uid=swg21984819",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-22374",
  "openTime": "2018-11-03",
  "patchDescription": "IBM Spectrum Protect\u548cSpectrum Protect Snapshot\u90fd\u662f\u7f8e\u56fdIBM\u516c\u53f8\u7684\u4ea7\u54c1\u3002IBM Spectrum Protect\u662f\u4e00\u5957\u6570\u636e\u4fdd\u62a4\u5e73\u53f0\uff0c\u5b83\u4e3a\u4f01\u4e1a\u63d0\u4f9b\u5355\u4e00\u63a7\u5236\u548c\u7ba1\u7406\u70b9\uff0c\u5e76\u652f\u6301\u5bf9\u6240\u6709\u89c4\u6a21\u7684\u865a\u62df\u3001\u7269\u7406\u548c\u4e91\u73af\u5883\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d\u3002Spectrum Protect Snapshot\u662f\u4e00\u5957\u4f7f\u7528\u9ad8\u7ea7\u5feb\u7167\u6280\u672f\u8fdb\u884c\u6570\u636e\u5907\u4efd\u548c\u8fd8\u539f\u7684\u8f6f\u4ef6\u3002GSKit\u662f\u5176\u4e2d\u7684\u4e00\u5957\u5b89\u5168\u7ba1\u7406\u5de5\u5177\u3002\r\n\r\nIBM Spectrum Protect\u548cSpectrum Protect Snapshot\u4e2d\u7684GSKit\u7ec4\u4ef6\u5b58\u5728\u4fe1\u4efb\u7ba1\u7406\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8eCMS KDB\u903b\u8f91\u4f7f\u7528\u4e86\u8f83\u5f31\u7684\u5bc6\u7801\u4fdd\u62a4\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6062\u590d\u5bc6\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "IBM Spectrum Protect\u548cSpectrum Protect Snapshot\u4e2d\u7684GSKit\u7ec4\u4ef6\u5b58\u5728\u4fe1\u4efb\u7ba1\u7406\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "IBM Spectrum Protect 7.1",
      "IBM Spectrum Protect 7.2",
      "IBM Spectrum Protect Snapshot 4.1.3",
      "IBM Spectrum Protect Snapshot 4.1.4",
      "IBM Spectrum Protect Snapshot 4.1.6"
    ]
  },
  "referenceLink": "https://www.securityfocus.com/bid/104511,https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1447",
  "serverity": "\u4e2d",
  "submitTime": "2018-10-16",
  "title": "IBM Spectrum Protect\u548cSpectrum Protect Snapshot\u4e2d\u7684GSKit\u7ec4\u4ef6\u5b58\u5728\u4fe1\u4efb\u7ba1\u7406\u6f0f\u6d1e"
}

CVE-2018-1447 (GCVE-0-2018-1447)

Vulnerability from cvelistv5 – Published: 2018-04-04 18:00 – Updated: 2024-09-17 01:50

Summary

The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to ensure the new password is stored more securely. Products should encourage customers to take this step as a high priority action. IBM X-Force ID: 139972.

Severity

5.1 (Medium)


                        
                          CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:N/S:U/UI:N

CWE

Obtain Information

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1242 records in the last 180 days details

References

7 references

URL	Tags
http://www.ibm.com/support/docview.wss?uid=swg22015066	x_refsource_CONFIRM
http://www.ibm.com/support/docview.wss?uid=swg22014957	x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilit…	x_refsource_MISC
http://www.ibm.com/support/docview.wss?uid=swg22015071	x_refsource_CONFIRM
http://www.securityfocus.com/bid/104511	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1041012	vdb-entryx_refsource_SECTRACK
http://www.ibm.com/support/docview.wss?uid=swg22014669	x_refsource_CONFIRM

Impacted products

4 products

Vendor	Product	Version
IBM	Spectrum Protect	Affected: 7.1 Affected: 8.1
IBM	Spectrum Protect Snapshot	Affected: 4.1.3 Affected: 4.1.4 Affected: 4.1.6
IBM	Spectrum Protect for Virtual Environments	Affected: 7.1 Affected: 8.1
IBM	Spectrum Protect for Space Management	Affected: 7.1 Affected: 8.1

Date Public

2018-03-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:59:39.101Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.ibm.com/support/docview.wss?uid=swg22015066"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.ibm.com/support/docview.wss?uid=swg22014957"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/139972"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.ibm.com/support/docview.wss?uid=swg22015071"
          },
          {
            "name": "104511",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104511"
          },
          {
            "name": "1041012",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041012"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.ibm.com/support/docview.wss?uid=swg22014669"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Spectrum Protect",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "7.1"
            },
            {
              "status": "affected",
              "version": "8.1"
            }
          ]
        },
        {
          "product": "Spectrum Protect Snapshot",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "4.1.3"
            },
            {
              "status": "affected",
              "version": "4.1.4"
            },
            {
              "status": "affected",
              "version": "4.1.6"
            }
          ]
        },
        {
          "product": "Spectrum Protect for Virtual Environments",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "7.1"
            },
            {
              "status": "affected",
              "version": "8.1"
            }
          ]
        },
        {
          "product": "Spectrum Protect for Space Management",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "7.1"
            },
            {
              "status": "affected",
              "version": "8.1"
            }
          ]
        }
      ],
      "datePublic": "2018-03-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to ensure the new password is stored more securely. Products should encourage customers to take this step as a high priority action. IBM X-Force ID: 139972."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/A:N/AC:H/AV:L/C:H/I:N/PR:N/S:U/UI:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Obtain Information",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-12T09:57:01.000Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.ibm.com/support/docview.wss?uid=swg22015066"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.ibm.com/support/docview.wss?uid=swg22014957"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/139972"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.ibm.com/support/docview.wss?uid=swg22015071"
        },
        {
          "name": "104511",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104511"
        },
        {
          "name": "1041012",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041012"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.ibm.com/support/docview.wss?uid=swg22014669"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@us.ibm.com",
          "DATE_PUBLIC": "2018-03-29T00:00:00",
          "ID": "CVE-2018-1447",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Spectrum Protect",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "7.1"
                          },
                          {
                            "version_value": "8.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Spectrum Protect Snapshot",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "4.1.3"
                          },
                          {
                            "version_value": "4.1.4"
                          },
                          {
                            "version_value": "4.1.6"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Spectrum Protect for Virtual Environments",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "7.1"
                          },
                          {
                            "version_value": "8.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Spectrum Protect for Space Management",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "7.1"
                          },
                          {
                            "version_value": "8.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "IBM"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to ensure the new password is stored more securely. Products should encourage customers to take this step as a high priority action. IBM X-Force ID: 139972."
            }
          ]
        },
        "impact": {
          "cvssv3": {
            "BM": {
              "A": "N",
              "AC": "H",
              "AV": "L",
              "C": "H",
              "I": "N",
              "PR": "N",
              "S": "U",
              "UI": "N"
            }
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Obtain Information"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.ibm.com/support/docview.wss?uid=swg22015066",
              "refsource": "CONFIRM",
              "url": "http://www.ibm.com/support/docview.wss?uid=swg22015066"
            },
            {
              "name": "http://www.ibm.com/support/docview.wss?uid=swg22014957",
              "refsource": "CONFIRM",
              "url": "http://www.ibm.com/support/docview.wss?uid=swg22014957"
            },
            {
              "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/139972",
              "refsource": "MISC",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/139972"
            },
            {
              "name": "http://www.ibm.com/support/docview.wss?uid=swg22015071",
              "refsource": "CONFIRM",
              "url": "http://www.ibm.com/support/docview.wss?uid=swg22015071"
            },
            {
              "name": "104511",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104511"
            },
            {
              "name": "1041012",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041012"
            },
            {
              "name": "http://www.ibm.com/support/docview.wss?uid=swg22014669",
              "refsource": "CONFIRM",
              "url": "http://www.ibm.com/support/docview.wss?uid=swg22014669"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2018-1447",
    "datePublished": "2018-04-04T18:00:00.000Z",
    "dateReserved": "2017-12-13T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:50:34.113Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted