CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
41.4%
IBM Storage Protect Plus Microsoft File Systems Backup and Restore can be affected by vulnerabilities in cryptography and Jinja which include obtain sensitive information and cross-site scripting, as described by the CVEs in the “Vulnerability Details” section. These vulnerabilities have been addressed.
CVEID:CVE-2023-50782
**DESCRIPTION:**Python Cryptographic Authority cryptography could allow a remote attacker to obtain sensitive information, caused by a flaw when decrypting captured messages in TLS servers that use RSA key exchanges. By utilize cryptographic attack techniques, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.
CVSS Base score: 5.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/281614 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
CVEID:CVE-2024-22195
**DESCRIPTION:**Pallets Jinja is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the xmlattr filter. A remote authenticated attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim’s Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim’s cookie-based authentication credentials.
CVSS Base score: 5.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/279344 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
Affected Product(s) | Version(s) |
---|---|
IBM Storage Protect Plus File Systems Agent | 10.1.6 - 10.1.16 |
IBM Storage Protect****Plus Affected Versions | **Fixing **Level | Platform | Link to Fix and Instructions |
---|---|---|---|
10.1.6 - 10.1.16 | 10.1.16.1 | Windows | <https://www.ibm.com/support/pages/node/7109995> |
None
Vendor | Product | Version | CPE |
---|---|---|---|
ibm | storage_protect_plus | 10.1.6 | cpe:2.3:a:ibm:storage_protect_plus:10.1.6:*:*:*:*:*:*:* |
ibm | storage_protect_plus | 10.1.7 | cpe:2.3:a:ibm:storage_protect_plus:10.1.7:*:*:*:*:*:*:* |
ibm | storage_protect_plus | 10.1.8 | cpe:2.3:a:ibm:storage_protect_plus:10.1.8:*:*:*:*:*:*:* |
ibm | storage_protect_plus | 10.1.9 | cpe:2.3:a:ibm:storage_protect_plus:10.1.9:*:*:*:*:*:*:* |
ibm | storage_protect_plus | 10.1.10 | cpe:2.3:a:ibm:storage_protect_plus:10.1.10:*:*:*:*:*:*:* |
ibm | storage_protect_plus | 10.1.11 | cpe:2.3:a:ibm:storage_protect_plus:10.1.11:*:*:*:*:*:*:* |
ibm | storage_protect_plus | 10.1.13 | cpe:2.3:a:ibm:storage_protect_plus:10.1.13:*:*:*:*:*:*:* |
ibm | storage_protect_plus | 10.1.14 | cpe:2.3:a:ibm:storage_protect_plus:10.1.14:*:*:*:*:*:*:* |
ibm | storage_protect_plus | 10.1.15 | cpe:2.3:a:ibm:storage_protect_plus:10.1.15:*:*:*:*:*:*:* |
ibm | storage_protect_plus | 10.1.15.1 | cpe:2.3:a:ibm:storage_protect_plus:10.1.15.1:*:*:*:*:*:*:* |
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
41.4%