IBM Spectrum Protect Plus 安全漏洞

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. An information disclosure vulnerability...

CVE-2021-20546

IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and cause the application to crash. IBM X-Force ID: 198934...

CVE-2021-20432

IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 196344...

IBM Spectrum Protect Plus 加密问题漏洞

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. IBM Spectrum Protect Plus has a security...

IBM Spectrum Protect Server Stack Buffer Overflow Vulnerability

IBM Spectrum Protect is a data protection platform that provides organizations with a single point of control and management for backup and recovery.IBM Spectrum Protect Server is the server of the... A stack buffer overflow vulnerability exists in IBM Spectrum Protect Server versions 7.1 and 8.1...

CVE-2021-20491

IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-For...

CVE-2021-20491

IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-For...

Stack overflow

IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-For...

CVE-2021-20491

IBM Spectrum Protect Server (versions 7.1 and 8.1) is affected by a stack-based buffer overflow caused by improper bounds checking during command parsing. An attacker could trigger the overflow by issuing a malformed command parameter, potentially crashing the server. Affected releases include IB...

CVE-2021-20491

IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-For...

Security Bulletin: Vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect Server, Operations Center, and Client Management Service (CVE-2020-14782, CVE-2020-27221)

Summary Vulnerabilities in IBM® Runtime Environment Java™ affect IBM Spectrum Protect Server, IBM Spectrum Protect Operations Center, and IBM Spectrum Protect Client Management Server. These Java vulnerabilities were disclosed as part of the IBM Java SDK updates in October 2020 and January 2021...

Security Bulletin: Stack-based Buffer Overflow in IBM Spectrum Protect Server (CVE-2021-20491)

Summary IBM Spectrum Protect Server is vulnerable to a stack-based buffer overflow. Vulnerability Details CVEID: CVE-2021-20491 DESCRIPTION: IBM Spectrum Protect Server is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a...

Security Bulletin: Multiple vulnerabilities in IBM Spectrum Protect Operations Center (CVE-2020-4954, CVE-2020-4955, CVE-2020-4956)

Summary IBM Spectrum Protect Operations Center is vulnerable to execution of arbitrary code on the system, authentication bypass, and denial of service. UPDATED: 15 April 2021 - Added fix for 8.1.11 8.1.11.100. Vulnerability Details CVEID: CVE-2020-4955 DESCRIPTION: IBM Spectrum Protect Operation...

IBM Spectrum Protect 缓冲区错误漏洞

IBM Spectrum Protect is a data protection platform that provides organizations with a single point of control and management for backup and recovery.IBM Spectrum Protect Server is the server of the... A stack buffer overflow vulnerability exists in IBM Spectrum Protect Server versions 7.1 and 8.1...

CVE-2021-20491

IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-For...

Security Bulletin: Vulnerability in IBM Java Runtime Environment affects installation and uninstallation of IBM Spectrum Protect for Enterprise Resource Planning on AIX and Linux (CVE-2020-27221)

Summary A vulnerability in IBM Java Runtime Environment may affect the installation and uninstallation of IBM Spectrum Protect for Enterprise Resource Planning ERP on AIX and Linux. This issue was disclosed as part of the IBM Java SDK updates in January 2021. UPDATED: 18 March 2021 - Corrected...

Security Bulletin: Vulnerabilities in Linux Kernel and Java affect IBM Spectrum Protect Plus

Summary Multiple vulnerabilities in the Linux Kernel and Java may affect IBM Spectrum Protect Plus. The Java vulnerabilities were disclosed as part of the Java Critical Patch Updates in July and October 2020. UPDATED: 3 March 2021: Added CVE-2020-10711 Vulnerability Details CVEID: CVE-2020-14782...

IBM Spectrum Protect Operations Center Authorization Issues Vulnerability

IBM Spectrum Protect Operations Center is a software from IBM USA that provides visual control for IBM Spectrum Protect environments. An authorization issue vulnerability exists in IBM Spectrum Protect Operations Center that arises from a lack of authentication measures or insufficient...

IBM Spectrum Protect Operations Center Resource Management Error Vulnerability

IBM Spectrum Protect Operations Center is a software from IBM USA that provides visual control for IBM Spectrum Protect environments. A resource management error vulnerability exists in IBM Spectrum Protect Operations Center that arises from mismanagement of system resources e.g., memory, disk...

IBM Spectrum Protect Plus Denial of Service Vulnerability (CNVD-2021-12645)

IBM Spectrum Protect Plus is a data protection and availability solution for virtualized environments that can be deployed in minutes and protect your environment in less than an hour. A denial of service vulnerability exists in IBM Spectrum Protect Plus 10.1.0 - 10.1.7. A remote user can exploit...