CVE-2022-22474

Summary: CVE-2022-22474 affects IBM Spectrum Protect Client components dsmcad, dsmc, and dsmcsvc (IBM Spectrum Protect 8.1.0.0–8.1.14.0). The issue arises from how read operations on TCP/IP sockets are handled, which can lead to a denial-of-service condition for client operations. Affected versio...

CVE-2022-22478

IBM Spectrum Protect Client 8.1.0.0–8.1.14.0 stores user credentials in plaintext readable by a local user, constituting information disclosure (CVE-2022-22478). IBM’s bulletin notes a fix in version 8.1.15 (Backup-Archive/Space Management components affected). CVSSv3 base score reported as 6.2 (...

CVE-2021-29672

The CVE-2021-29672 issue affects IBM Spectrum Protect Client versions 8.1.0.0–8.1.11.0 (and 1.11.0), where a stack-based buffer overflow arises from improper bounds checking while processing locale settings. A local attacker could overflow a buffer to execute arbitrary code with elevated privileg...

CVE-2018-1545

The CVE-2018-1545 issue affects IBM Spectrum Protect family (IBM Spectrum Protect Client and IBM Spectrum Protect for Virtual Environments) where legacy SSL/TLS protocols and weak ciphers could allow decryption of highly sensitive data. The IBM security bulletin clarifies affected versions: Clien...

CVE-2021-20546

CVE-2021-20546 affects IBM Spectrum Protect Client versions 8.1.0.0 through 8.1.11.0, where a stack-based buffer overflow can be triggered by improper bounds checking when processing locale/current language environment settings. This local vulnerability can cause the client to crash and may allow...

CVE-2023-33832

The CVE-2023-33832 issue affects IBM Storage Protect family: Storage Protect Client, Storage Protect for Virtual Environments, and Storage Protect for Space Management (versions 8.1.0.0–8.1.17.0). Root cause is improper time-of-check to time-of-use, enabling a local user to cause a denial of serv...

CVE-2018-1785

CVE-2018-1785 affects IBM Spectrum Protect (formerly Tivoli Storage Manager) in both 7.1 and 8.1 lines for IBM Spectrum Protect Server, Client, and related Virtual Environments components. The vulnerability stems from the use of weaker cryptographic algorithms (notably 3DES) that can permit decry...

CVE-2020-4406

CVE-2020-4406 affects IBM Spectrum Protect Client (Linux/Windows) 8.1.7.0–8.1.9.1 and IBM Spectrum Protect for Space Management 8.1.7.0–8.1.9.1, with AIX 8.1.9.0–8.1.9.1 also listed. The vulnerability is a clickjacking exposure in the web user interface that could allow a remote attacker to hijac...

CVE-2020-4494

CVE-2020-4494 affects IBM Spectrum Protect Client (Linux/Windows) versions 8.1.7.0–8.1.9.1 and Spectrum Protect for Space Management (Linux) 8.1.7.0–8.1.9.1, with web UIs that could bypass authentication due to improper session validation, potentially granting access to unauthorized resources. IB...