Spectrum Protect For Virtual Environments Security Vulnerabilities and Issues — Spectrum Protect For Virtual Environments CVE List

Lucene search

IbmSpectrum Protect For Virtual Environments

11 matches found

CVE•added 2019/11/25 5:15 p.m.•118 views

CVE-2018-2025

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551.

5.1CVSS4.8AI score0.00084EPSS

CVE•added 2018/04/04 6:29 p.m.•67 views

CVE-2018-1447

The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password ...

8.1CVSS6.7AI score0.00081EPSS

CVE•added 2017/10/05 5:29 p.m.•46 views

CVE-2017-1378

IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875.

7.8CVSS7.2AI score0.00036EPSS

CVE•added 2023/07/19 1:15 a.m.•42 views

CVE-2023-33832

IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due to improper time-of-check to time-of-use functionality. IBM X-Force ID: 256012.

6.2CVSS5AI score0.00013EPSS

CVE•added 2019/04/08 3:29 p.m.•40 views

CVE-2018-1787

IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872.

5.5CVSS5.4AI score0.00033EPSS

CVE•added 2016/01/02 5:59 a.m.•37 views

CVE-2015-7429

The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.4 and Tivoli Storage FlashCopy Manager for VMware (aka Spectrum Protect Snapshot) 4.1 before 4.1.4 allows...

8.5CVSS7.8AI score0.00299EPSS

CVE•added 2018/09/26 3:29 p.m.•37 views

CVE-2018-1545

IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 142649.

7.5CVSS7.2AI score0.00112EPSS

CVE•added 2019/04/08 3:29 p.m.•36 views

CVE-2018-1882

In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file. IBM X-Force ID: 151968.

4.7CVSS4.6AI score0.0003EPSS

CVE•added 2018/09/26 3:29 p.m.•35 views

CVE-2018-1785

IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 148870.

7.5CVSS7.2AI score0.00137EPSS

CVE•added 2021/04/26 5:15 p.m.•33 views

CVE-2021-20532

IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their privileges to take full control of the system due to insecure directory permissions. IBM X-Force ID: 198811.

7.8CVSS7.5AI score0.00023EPSS

CVE•added 2016/01/02 9:59 p.m.•32 views

CVE-2015-7426

The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.3.0 and Tivoli Storage FlashCopy Manager for VMware (aka Spectrum Protect Snapshot) 4.1 before 4.1.3.0 al...

10CVSS9.4AI score0.02726EPSS