Read the docs
TI-2018-01331 Aliases CVE-2018-1447GHSA-m7f9-w9g7-x6f7

The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3…

Priority LOW 37CWE-916Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to ensure the new password is stored more securely. Products should encourage customers to take this step as a high priority action. IBM X-Force ID: 139972.

Why it matters now

EPSS 0.00913 60th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
IBMSpectrum Protect7.1; 8.1—No fix listedCNA
IBMSpectrum Protect Snapshot4.1.3; 4.1.4; 4.1.6—No fix listedCNA
IBMSpectrum Protect for Virtual Environments7.1; 8.1—No fix listedCNA
IBMSpectrum Protect for Space Management7.1; 8.1—No fix listedCNA
  • Spectrum Protect VendorIBM Affected 7.1; 8.1 Fixed in — No fix listed CNA
  • Spectrum Protect Snapshot VendorIBM Affected 4.1.3; 4.1.4; 4.1.6 Fixed in — No fix listed CNA
  • Spectrum Protect for Virtual Environments VendorIBM Affected 7.1; 8.1 Fixed in — No fix listed CNA
  • Spectrum Protect for Space Management VendorIBM Affected 7.1; 8.1 Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:ibm:spectrum_protect_for_space_management:*:*:*:*:*:vmware:*:*7.1.0.0 – 7.1.8.1; 8.1.0.0 – 8.1.4.0VulnerableIBM
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:*:*:*:*:*:vmware:*:*7.1.0.0 – 7.1.8.0; 8.1.0.0 – 8.1.4.0VulnerableIBM
cpe:2.3:a:ibm:spectrum_protect_snapshot:*:*:*:*:*:vmware:*:*4.1.0.0 – 4.1.6.3VulnerableIBM
  • cpe:2.3:a:ibm:spectrum_protect_for_space_management:*:*:*:*:*:vmware:*:* Versions 7.1.0.0 – 7.1.8.1; 8.1.0.0 – 8.1.4.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:*:*:*:*:*:vmware:*:* Versions 7.1.0.0 – 7.1.8.0; 8.1.0.0 – 8.1.4.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:spectrum_protect_snapshot:*:*:*:*:*:vmware:*:* Versions 4.1.0.0 – 4.1.6.3 Vulnerable ·IBM

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-1447
  2. 2026-10-03 Alias added: GHSA-m7f9-w9g7-x6f7

References

Patch 4

  • TI-2020-03837 Improper authentication in IBM Spectrum Protect for Space Management CVSS 3.1HIGH 7.5
  • TI-2021-10371 Out-of-bounds write in IBM Spectrum Protect for Space Management CVSS 3.1HIGH 7.8
  • TI-2023-16710 IBM Storage Protect denial of service CVSS 3.1MEDIUM 6.2
  • TI-2020-03781 Clickjacking in IBM Spectrum Protect Client CVSS 3.1MEDIUM 5.4
  • TI-2021-16467 Out-of-bounds write in IBM Spectrum Protect CVSS 3.1MEDIUM 5.5
  • TI-2021-03785 Out-of-bounds write in IBM Spectrum Protect for Space Management CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences