CVE-2019-4087

IBM Spectrum Protect Server and Storage Agent versions 7.1 and 8.1 are affected by a stack-based buffer overflow due to improper bounds checking in communication exchanges, enabling remote code execution or crash via oversized requests. Physical components: Spectrum Protect Server and Storage Age...

CVE-2022-22348

CVE-2022-22348 affects IBM Spectrum Protect Operations Center versions 8.1.0.000–8.1.13.xxx. The issue is reverse tabnabbing that enables a malicious page linked from within Operations Center to rewrite the original page, potentially leading to phishing. It coexists with a CSRF risk (CVE-2022-223...

CVE-2019-4129

CVE-2019-4129 affects IBM Spectrum Protect Operations Center (versions 7.1–8.1). The root cause is an error message that may display a stack trace, enabling a remote attacker to obtain sensitive information about the Operations Center architecture. Public details in multiple sources (IBM bulletin...

CVE-2022-22346

The CVE-2022-22346 entry concerns IBM Spectrum Protect Operations Center (OPC). Affected版本: OPC 8.1.0.000–8.1.13.xxx. Vulnerability: Cross‑Site Request Forgery (CSRF) that could let an attacker perform malicious, unauthorized actions that a trusted user could initiate. Root cause details are not ...

CVE-2022-22485

IBM Spectrum Protect Server vulnerable to brute-force access because Operations Center login failures may not increment the invalid-sign-on counter. Affected: Spectrum Protect Server, 8.1.0.000–8.1.14.000 (Operations Center 8.1.x). Root cause: administrator sign-on failure count not incremented, ...

CVE-2019-4088

CVE-2019-4088 affects IBM Spectrum Protect Server versions 7.1 and 8.1 and related Storage Agents. The issue is a local privilege-escalation caused by loading a specially crafted library via the dsmqsan module, allowing a local attacker to gain root privileges on the vulnerable system. Affected r...

CVE-2022-22494

CVE-2022-22494 affects IBM Spectrum Protect Operations Center versions 8.1.0.000–8.1.14. A remotely accessible information-disclosure flaw allows an attacker to obtain database details (type/version) by sending a specially crafted HTTP request, which could aid further attacks. IBM’s advisories in...

CVE-2021-38901

CVE-2021-38901 affects IBM Spectrum Protect Operations Center (7.1.x: 7.1.0.000–7.1.13.x). Under special configurations, a local user could obtain highly sensitive information; the issue stems from tracing exposing credentials in trace files (plain text). CVSS: vector and scores indicate a MEDIUM...

CVE-2020-4954

CVE-2020-4954 affects IBM Spectrum Protect Operations Center 7.1 and 8.1. The root cause is improper session validation, allowing a remote attacker to bypass authentication by obtaining a valid session via the configuration panel from an attacker-controlled Spectrum Protect server, granting acces...

CVE-2020-4693

CVE-2020-4693 affects IBM Spectrum Protect Operations Center and related Spectrum Protect products. The vulnerability arises from improper validation of data prior to export, enabling an attacker to execute arbitrary code remotely over the network. Affected items include: IBM Spectrum Protect Ope...

CVE-2020-4955

CVE-2020-4955 concerns IBM Spectrum Protect Operations Center. The IBM bulletin documents that versions 7.1.0.000–7.1.12.x and 8.1.0.000–8.1.10.100 (and 8.1.11.000) are affected by an improper parameter validation flaw. A remote attacker could exploit this by crafting an unspecified servlet reque...

CVE-2020-4771

IBM Spectrum Protect Operations Center contains a vulnerability (CVE-2020-4771) where improper authentication of a websocket endpoint could allow a remote attacker to obtain sensitive information by subscribing to the websocket event stream. Affected versions are IBM Spectrum Protect Operations C...

CVE-2020-4956

CVE-2020-4956 (IBM Spectrum Protect Operations Center) affects IBM Spectrum Protect Operations Center versions 7.1.0.000–7.1.12.xxx and 8.1.0.000–8.1.10.100, with a denial-of-service condition caused by a RPC that allows certain cache values to be set and dumped to a file. Repeatedly dumping a gr...