Lucene search
IBM2A6E29EDACDDE4530501A08F18464CB9DB83339A00B7E44C7B8167C8CEA68132HistoryApr 24, 2021 - 6:15 a.m.
Security Bulletin: Information Disclosure in IBM Spectrum Protect Plus Microsoft File Systems backup and restore log files (CVE-2021-20536)
2021-04-2406:15:51
www.ibm.com
9
0.0005 Low
EPSS
Percentile
18.1%
Summary
IBM Spectrum Protect Plus Microsoft® File Systems backup and restore log files may contain sensitive information.
Vulnerability Details
CVEID:CVE-2021-20536
**DESCRIPTION:**IBM Spectrum Protect Plus File Systems Agent stores potentially sensitive information in log files that could be read by a local user.
CVSS Base score: 6.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/198836 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Spectrum Protect Plus Microsoft File Systems backup and restore | |
| 10.1.6-10.1.7 |
Remediation/Fixes
| IBM Spectrum Protect Plus Release | First Fixing VRM Level | Platform | Link to Fix |
|---|---|---|---|
| 10.1 | 10.1.8 | Windows | <https://www.ibm.com/support/pages/node/6415111> |
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm spectrum protect plus | eq | 10.1.6 | |
| ibm spectrum protect plus | eq | 10.1.7 |
Related
cve
cve
CVE-2021-20536
2021-04-26 17:15:08
nvd
nvd
CVE-2021-20536
2021-04-26 17:15:08
cvelist
cvelist
CVE-2021-20536
2021-04-24 00:00:00
prion
prion
Design/Logic Flaw
2021-04-26 17:15:00
0.0005 Low
EPSS
Percentile
18.1%
Related for 2A6E29EDACDDE4530501A08F18464CB9DB83339A00B7E44C7B8167C8CEA68132