CVE-2022-40234

IBM Spectrum Protect Plus versions prior to 10.1.12 (excluding 10.1.12) improperly include private key information for a certificate inside the generated .crt file when uploading TLS certificates. If this .crt is shared, an attacker can obtain the private key. A fix is available in 10.1.12 (Linux...