MEDIUM · 6.8

CVE-2018-1675

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memory on target systems that are configured to use TADDM. IBM X-Force ID: 145110.

Vulnerability Description

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memory on target systems that are configured to use TADDM. IBM X-Force ID: 145110.

CVSS Score

6.8

MEDIUM

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
IbmTivoli Application Dependency Discovery Manager>= 7.2.2.0, <= 7.2.2.5

Related Weaknesses (CWE)

References

FAQ

What is CVE-2018-1675?

CVE-2018-1675 is a vulnerability with a CVSS score of 6.8 (MEDIUM). IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memory on target systems that are configured to use TADDM. IBM X-Force ID: 145110.

How severe is CVE-2018-1675?

CVE-2018-1675 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-1675?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Tivoli Application Dependency Discovery Manager.