Design/Logic Flaw

2022-12-1422:15:00

PRIOn knowledge base

www.prio-n.com

ibm

spectrum protect plus

design flaw

unencrypted data

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.2%

JSON

IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in the communication flow between Spectrum Protect Plus vSnap and its agents. An attacker could obtain information using main in the middle techniques. IBM X-Force ID: 182106.

CPENameOperatorVersion
spectrum_protect_plusge10.1.0
spectrum_protect_pluslt10.1.13

CPE	Name	Operator	Version
	spectrum_protect_plus	ge	10.1.0
	spectrum_protect_plus	lt	10.1.13

References

exchange.xforce.ibmcloud.com/vulnerabilities/182106

www.ibm.com/support/pages/node/6847627