IBM Spectrum Protect Plus Information Disclosure Vulnerability (CNVD-2022-05087)

IBM Spectrum Protect Plus is a data protection platform from IBM USA. The platform provides enterprises with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes.IBM Spectrum Protect Plus has a security vulnerability that stems from incorrect certificate validation, and IBM Spectrum Protect Plus servers connected to the IBM Spectrum Protect Plus workload agent is subject to a man-in-the-middle attack. No details of the vulnerability are currently available.