IBM Patches Critical, High-Severity Flaws in Spectrum Protect

🗓️ 02 Jul 2019 20:28:52Reported by Lindsey O'DonnellType

threatpost🔗 threatpost.com👁 140 Views

IBM patches critical and high-severity flaws in Spectrum Protect, Guardium, Planning Analytics, and Daeja ViewON

Reporter	Title	Published	Views	Family All 65
IBM Security Bulletins	Security Bulletin: It is possible to download arbitrary server files via ViewONE server (CVE-2019-4260)	28 Jan 202118:05	–	ibm
IBM Security Bulletins	Security Bulletin: Stack-based buffer overflow and elevation of privileges vulnerabilities in IBM Spectrum Protect Server and Storage Agents (CVE-2019-4087, CVE-2019-4088)	2 Jul 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: Password disclosure in IBM Spectrum Protect Server (CVE-2019-4140)	28 Jun 201921:25	–	ibm
IBM Security Bulletins	Security Bulletin: Information Disclosure in IBM Spectrum Protect Operations Center (CVE-2019-4129)	28 Jun 201921:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a FileServer functionality vulnerability	17 Mar 202016:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Administration is affected by a vulnerability	28 Jun 201920:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a FileServer functionality vulnerability	1 Oct 201918:52	–	ibm
BDU FSTEC	The vulnerability of the IBM Spectrum Protect server and data protection agent, related to buffer overflows in the stack, allows attackers to execute arbitrary code or cause failures in the server or data protection agent’s functionality.	8 Jul 201900:00	–	bdu_fstec
CNVD	IBM Planning Analytics Cross-Site Scripting Vulnerability (CNVD-2019-20988)	2 Jul 201900:00	–	cnvd
CNVD	IBM Spectrum Protect Buffer Overflow Vulnerability	4 Jul 201900:00	–	cnvd

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
threatpost	www.threatpost.com/newsletter-sign/
www-01	www.www-01.ibm.com/support/docview.wss
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
www-01	www.www-01.ibm.com/support/docview.wss
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
www-01	www.www-01.ibm.com/support/docview.wss
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/160698
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/158281

02 Jul 2019 20:28Current

8.2High risk

Vulners AI Score8.2

EPSS0.06959

ibm spectrum protect guardium planning analytics daeja viewone vulnerability critical high-severity remote attacker arbitrary code data storage enterprise backup recovery cvss score buffer overflow elevated privileges databases information disclosure