Spectrum Protect Plus Security Vulnerabilities and Issues — Spectrum Protect Plus CVE List

Lucene search

IbmSpectrum Protect Plus

11 matches found

CVE•added 2022/06/06 7:15 p.m.•859 views

CVE-2022-22396

Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases. Credentials could be the remote vSnap, offload targets, or VADP credentials depending on the operation performed. Credentials that are using API key or certificate are n...

7.5CVSS7.3AI score0.00121EPSS

CVE•added 2022/03/14 5:15 p.m.•92 views

CVE-2022-22354

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the Admin Console to become unresponsive. IBM X-Fo...

7.5CVSS7.2AI score0.0018EPSS

CVE•added 2021/01/08 7:15 p.m.•58 views

CVE-2020-5018

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may include sensitive information in its URLs increasing the risk of such information being caputured by an attacker. IBM X-Force ID: 193654.

7.5CVSS7.1AI score0.00097EPSS

CVE•added 2019/07/01 3:15 p.m.•57 views

CVE-2019-4383

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected restore operation may result in an escalation of user privileges. IBM X-Force ID: 162165.

7.9CVSS6.4AI score0.00064EPSS

CVE•added 2022/09/19 6:15 p.m.•53 views

CVE-2022-40608

IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory traversal attack. This results in the restore operation gaining access to files which the operator should not have access to...

7.5CVSS7.1AI score0.00307EPSS

CVE•added 2021/02/10 5:15 p.m.•44 views

CVE-2020-5023

IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause the serivce to crash due to excess resource consumption. IBM X-Force ID: 193659.

7.5CVSS7.3AI score0.00729EPSS

CVE•added 2018/09/26 3:29 p.m.•41 views

CVE-2018-1768

IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a test operation, the user id an password may be displayed in plain text within an instrumentation log file. IBM X-Force ID: 148622.

7.8CVSS7.1AI score0.00055EPSS

CVE•added 2020/03/31 3:15 p.m.•40 views

CVE-2020-4214

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to arbitrary delete a directory caused by improper validation of user-supplied input. IBM X-Force ID: 175026.

7.5CVSS7.4AI score0.00104EPSS

CVE•added 2024/02/02 1:15 p.m.•39 views

CVE-2023-47148

IBM Storage Protect Plus Server 10.1.0 through 10.1.15.2 Admin Console could allow a remote attacker to obtain sensitive information due to improper validation of unsecured endpoints which could be used in further attacks against the system. IBM X-Force ID: 270599.

7.5CVSS5.5AI score0.00056EPSS

CVE•added 2019/11/12 4:15 p.m.•32 views

CVE-2019-4652

IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963.

7.1CVSS6.4AI score0.0006EPSS

CVE•added 2021/04/26 5:15 p.m.•32 views

CVE-2021-29694

IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 200258.

7.5CVSS7.2AI score0.00112EPSS