CVE-2018-1675

CWE-200 — Information Exposure4 documents4 sources
Severity
7.5HIGH
EPSS
0.2%
top 57.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Tivoli Application Dependency Discovery Manager
Timeline
PublishedFeb 4
Latest updateMay 13

Description

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memory on target systems that are configured to use TADDM. IBM X-Force ID: 145110.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:NExploitability: 2.2 | Impact: 4.0

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-r84f-38v6-33wg: IBM Tivoli Application Dependency Discovery Manager 7↗2022-05-13
▶
CVEList
CVE-2018-1675: IBM Tivoli Application Dependency Discovery Manager 7↗2019-02-04
▶

💥Exploits & PoCs

1
Exploit-DB
ghostscript - executeonly Bypass with errorhandler Setup↗2018-10-09
▶
CVE-2018-1675 (HIGH CVSS 7.5) | IBM Tivoli Application Dependency D | cvebase.io