CVE-2018-2025

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551...

CVE-2018-2025

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551...

Design/Logic Flaw

IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing issue between client and server TCP/IP communications. IBM X-Force ID: 162477...

Code injection

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551...

CVE-2019-4406

IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing issue between client and server TCP/IP communications. IBM X-Force ID: 162477...

CVE-2019-4406

CVE-2019-4406 affects IBM Spectrum Protect (formerly Tivoli Storage Manager) Backup-Archive Client. The denial-of-service vulnerability arises from a timing issue in TCP/IP communications between the client and server, impacting the client’s availability (CVSS v3.0 base score 4.4). Affected produ...

CVE-2018-2025

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551...

CVE-2018-2025

The CVE-2018-2025 entry concerns IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments (7.1 and 8.1) that create CIT subdirectory directories/files with permissions that are readable/writable by everyone. Affected versions include Backup-Archive Client 8.1.0...

CVE-2018-2025: Incorrect Default Permissions

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551...

PT-2019-10039

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments versions 7.1 and 8.1 Description: The issue allows directories and files in the CIT subdirectory to be created with read and write permissions for...

CVE-2019-4406: Undefined Security Weakness

IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing issue between client and server TCP/IP communications. IBM X-Force ID: 162477...

PT-2019-17066

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Backup-Archive Client versions 7.1 through 8.1 Description The issue is related to a timing problem between client and server TCP/IP communications, which may lead to a denial of service attack. Recommendations For version...

The vulnerability of the Spectrum Power software-based web server allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Spectrum Power software-based web server relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malicious link...

IBM Spectrum Protect CVE-2019-4406 Local Denial of Service Vulnerability

Description IBM Spectrum Protect is prone to local denial-of-service vulnerability. Successful exploits will allow local attackers to cause a denial-of-service conditions. Technologies Affected IBM Spectrum Protect 7.1.0.0 IBM Spectrum Protect 7.1.6.6 IBM Spectrum Protect 7.1.6.7 IBM Spectrum...

IBM Spectrum Protect Plus Insecure File Permissions Vulnerability

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. A security vulnerability exists in IBM...

CVE-2019-4652

IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963...

CVE-2019-4652

IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963...

Design/Logic Flaw

IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963...

CVE-2019-4652

Affected software: IBM Spectrum Protect Plus, versions 10.1.0 through 10.1.4, on Windows. Issue: restored NTFS permissions (ACLs) are not preserved during file restore, potentially allowing a local attacker to access sensitive data or perform unauthorized actions. Root cause: insecure file permis...

CVE-2019-4652

IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963...