Spectrum Protect (Ibm) - vulnerabilities (CVEs)

23 CVEs, 0 in the last 30 days, 66 known versions, newest CVE from 2023-06-22. Vendor: Ibm.

CVEs of Spectrum Protect

CVE-2023-28956 - CVSS 8.4 (high), 2023-06-22: IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls.
CVE-2023-27863 - CVSS 4.9 (medium), 2023-05-12: IBM Spectrum Protect Plus Server 10.1.13, under specific configurations, could allow an elevated user to obtain SMB credentials that may be used to access…
CVE-2022-22484 - CVSS 5.5 (medium), 2022-05-17: IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account…
CVE-2022-22394 - CVSS 8.8 (high), 2022-03-21: The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls.…
CVE-2021-39048 - CVSS 6.2 (medium), 2021-12-13: IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local attacker could exploit…
CVE-2021-20491 - CVSS 4.4 (medium), 2021-04-16: IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By…
CVE-2020-5017 - CVSS 5.5 (medium), 2021-01-08: IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow a local user to obtain access to information beyond their intended role and permissions. IBM X-Force…
CVE-2020-4559 - CVSS 7.5 (high), 2020-08-28: IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input. IBM X-Force ID: 183613.
CVE-2020-4415 - CVSS 9.8 (critical), 2020-04-23: IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker…
CVE-2020-4210 - CVSS 9.8 (critical), 2020-02-24: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command,…
CVE-2020-4213 - CVSS 9.8 (critical), 2020-02-24: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command,…
CVE-2020-4212 - CVSS 9.8 (critical), 2020-02-24: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command,…
CVE-2020-4211 - CVSS 9.8 (critical), 2020-02-24: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command,…
CVE-2020-4222 - CVSS 9.8 (critical), 2020-02-24: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command,…
CVE-2018-2025 - CVSS 5.1 (medium), 2019-11-25: IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory…
CVE-2019-4236 - CVSS 5.1 (medium), 2019-07-22: A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (ACL) entries from…
CVE-2019-4267 - CVSS 7.8 (high), 2019-07-22: The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow. This could allow execution of arbitrary code on the local…
CVE-2019-4087 - CVSS 9.8 (critical), 2019-07-02: IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by servers and…
CVE-2019-4140 - CVSS 7.1 (high), 2019-07-02: IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databases by restoring old data. IBM X-Force…
CVE-2019-4129 - CVSS 5.3 (medium), 2019-07-02: IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused by an error message containing a…
CVE-2019-4088 - CVSS 7.8 (high), 2019-07-02: IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused by loading a…
CVE-2018-1787 - CVSS 5.5 (medium), 2019-04-08: IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872.
CVE-2018-1882 - CVSS 4.7 (medium), 2019-04-08: In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client…
CVE-2018-1853 - CVSS 6.1 (medium), 2019-04-08: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) could allow a remote attacker to hijack the clicking action of the victim. By persuading a…
CVE-2019-4093 - CVSS 5.1 (medium), 2019-04-02: IBM Tivoli Storage Manager (IBM Spectrum Protect 8.1.7) could allow a user to restore files and directories using IBM Spectrum Prootect Client Web User…
CVE-2018-1786 - CVSS 7.5 (high), 2018-11-12: IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IP resource leakage…
CVE-2018-1788 - CVSS 4.4 (medium), 2018-11-02: IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force ID: 148873.
CVE-2018-1785 - CVSS 7.5 (high), 2018-09-26: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
CVE-2018-1545 - CVSS 7.5 (high), 2018-09-26: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
CVE-2018-1550 - CVSS 6.2 (medium), 2018-09-26: IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other…
CVE-2018-1447 - CVSS 8.1 (high), 2018-04-04: The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function…
CVE-2017-1301 - CVSS 5.5 (medium), 2017-10-05: IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files…
CVE-2016-8937 - CVSS 9.8 (critical), 2017-10-05: The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too…
CVE-2017-1339 - CVSS 4.4 (medium), 2017-10-05: IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to…
CVE-2016-8939 - CVSS 5.5 (medium), 2017-06-07: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be…