Authentication flaw

2020-06-1514:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.8%

JSON

IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow an attacker to bypass authentication due to improper session validation which can result in access to unauthorized resources. IBM X-Force ID: 182019.

CPENameOperatorVersion
spectrum_protect_clientge8.1.7.0
spectrum_protect_clientle8.1.9.1
spectrum_protect_clientge8.1.9.0
spectrum_protect_clientle8.1.9.1
spectrum_protect_for_space_managementge8.1.7.0
spectrum_protect_for_space_managementle8.1.9.1
spectrum_protect_for_space_managementge8.1.9.0
spectrum_protect_for_space_managementle8.1.9.1

Name	Operator	Version
spectrum_protect_client	ge	8.1.7.0
spectrum_protect_client	le	8.1.9.1
spectrum_protect_client	ge	8.1.9.0
spectrum_protect_client	le	8.1.9.1
spectrum_protect_for_space_management	ge	8.1.7.0
spectrum_protect_for_space_management	le	8.1.9.1
spectrum_protect_for_space_management	ge	8.1.9.0
spectrum_protect_for_space_management	le	8.1.9.1