Security Bulletin: Vulnerability in werkzeug may affect IBM Spectrum Sentinel Anomaly Scan Engine (CVE-2023-25577, CVE-2023-23934)

Summary Vulnerabilities in werkzeug may affect IBM Spectrum Sentinel Anomaly Scan Engine. Vulnerabilities include: Werkzeug allowing remote attacker to bypass security restrictions and denial of service. Vulnerability Details CVEID:CVE-2023-23934 DESCRIPTION: Pallets Werkzeug could allow a remote...

CVE-2023-33832

IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due to improper time-of-check to time-of-use functionality. IBM X-Force ID: 256012...

Security Bulletin: A vulnerability in OpenStack Swift affects IBM Storage Scale environments with the S3 capability of Object protocol enabled (CVE-2022-47950)

Summary IBM Storage Scale, shipped with OpenStack Swift, is exposed to vulnerabilities as detailed below. The exposure to this vulnerability only exists if the Object protocol has been configured with S3 enabled. Vulnerability Details CVEID:CVE-2022-47950 DESCRIPTION: OpenStack Swift could allow ...

Security Bulletin: A vulnerability in IBM Storage Protect Client, IBM Storage Protect for Virtual Environments, and IBM Storage Protect for Space Management can lead to denial of service (CVE-2023-33832)

Summary IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments Data Protection for Hyper-V and Data Protection for VMware, and IBM Storage Protect for Space Management can be affected by a vulnerability that leads to denial of service. The vulnerability is describ...

IBM Spectrum Protect Backup-Archive Client Access Control Error Vulnerability

IBM Spectrum Protect Backup-Archive Client is a set of client programs for IBM Spectrum Protect file backup, archiving from International Business Machines IBM. An Access Control Error vulnerability exists in IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2, which stems from...

Security Bulletin: A vulnerability in the IBM Spectrum Protect Backup-Archive Client on Microsoft Windows Workstation operating systems can lead to local user escalated privileges (CVE-2023-28956)

Summary A vulnerability in the IBM Spectrum Protect Backup-Archive Client on Microsoft Windows workstation operating systems Microsoft Windows 8.1, 10, and 11 may allow a local user to escalate their privileges due to improper access controls. This problem does not affect Microsoft Windows server...

Security Bulletin: IBM Spectrum Scale Transparent Cloud Tiering is affected by a vulnerability which can allow an attacker to execute arbitrary code

Summary Logback could allow a remote authenticated attacker to execute arbitrary code on the system. Vulnerability Details CVEID:CVE-2021-42550 DESCRIPTION: Logback could allow a remote authenticated attacker to execute arbitrary code on the system. By using a specially-crafted configuration, an...

Security Bulletin: IBM Spectrum Control is vulnerable to weakness related KIE Drools

Summary Vulnerability in KIE Drools could allow a remote authenticated attacker to execute arbitrary code may affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2022-1415 DESCRIPTION: KIE Drools could allow a remote authenticated attacker to execute arbitrary code on the system, caused ...

Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to XStream

Summary Vulnerability in XStream allow denial of service, caused by a stack-based buffer overflow may affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2022-41966 DESCRIPTION: XStream is vulnerable to a denial of service, caused by a stack-based buffer overflow. By manipulating the...

Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to Apache Log4j

Summary Vulnerability in Apache Log4j allow denial of service, caused by a flaw when using the Chainsaw or SocketAppender components may affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2023-26464 DESCRIPTION: Apache Log4j is vulnerable to a denial of service, caused by a flaw when...

Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to Apache Commons FileUpload

Summary Vulnerability in Apache Commons FileUpload allows denial of service, caused by not limit the number of request, may affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by no...

Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to Node.js

Summary Vulnerability in Node.js allow a denial of service, caused by a regular expression may affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2023-24807 DESCRIPTION: Node.js is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw in the...

Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to Apache Kafka

Summary Vulnerability in Apache Kafka to allow denial of service, caused by improper input validation may affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2022-34917 DESCRIPTION: Apache Kafka is vulnerable to a denial of service, caused by improper input validation. By sending a...

Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to Apache Kafka

Summary Vulnerability in Apache Kafka allow a remote authenticated attacker to execute arbitrary code may affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2023-25194 DESCRIPTION: Apache Kafka could allow a remote authenticated attacker to execute arbitrary code on the system, caused b...

Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to OpenSSL

Summary Vulnerabilities in OpenSSL such as denial of service, may affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2022-4450 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error related to the improper handling of specific PEM data by the PEMreadbio...

Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to Apache CXF

Summary Vulnerability in Apache CXF allows server-side request forgery, caused by a flaw in parsing may affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2022-46364 DESCRIPTION: Apache CXF is vulnerable to server-side request forgery, caused by a flaw in parsing the href attribute of...

Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to OpenSSL

Summary Vulnerabilities in such as remote attacker to obtain sensitive information, denial of service may affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2022-4304 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a timing-based side channe...

Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to pdfmake [CVE-2022-46161]

Summary Vulnerability in pdfmake allow remote attacker to execute arbitrary code on the system which could affect IBM Spectrum Control. CVE-2022-46161 IBM has addressed this vulnerability. Vulnerability Details CVEID:CVE-2022-46161 DESCRIPTION: Node.js pdfmake module could allow a remote attacker...

CVE-2023-28956

IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls...

CVE-2023-28956 IBM Spectrum Protect Backup-Archive Client privilege escalation

IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls...