Design/Logic Flaw

2020-08-0416:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which could allow a local user to cause interruption of the service operations. IBM X-Force ID: 185372.

CPENameOperatorVersion
spectrum_protect_plusge10.1.0
spectrum_protect_plusle10.1.6

CPE	Name	Operator	Version
	spectrum_protect_plus	ge	10.1.0
	spectrum_protect_plus	le	10.1.6

References

exchange.xforce.ibmcloud.com/vulnerabilities/185372

www.ibm.com/support/pages/node/6255116