Vulnerabilities

TI-2023-16710 CVE-2023-33832 · GHSA-qrxg-7wrq-3g62

IBM Storage Protect denial of service

LOW 27

IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due to improper time-of-check to time-of-use functionality.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00132 Published 2023-07-19 No fix listed CWE-20

TI-2022-06761 CVE-2022-22478 · GHSA-mvjj-gmrm-r88p

Cleartext storage of sensitive information in IBM Spectrum Protect Client

LOW 24

IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a local user.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00162 Published 2022-06-30 No fix listed CWE-312

TI-2022-06757 CVE-2022-22474 · GHSA-wm9g-cqmh-5gqv

IBM Spectrum Protect 8.1.0.0 through 8.1.14.0 dsmcad, dsmc, and dsmcsvc processes…

LOW 35

IBM Spectrum Protect 8.1.0.0 through 8.1.14.0 dsmcad, dsmc, and dsmcsvc processes incorrectly handle certain read operations on TCP/IP sockets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01137 Published 2022-06-30 No fix listed

TI-2021-10371 CVE-2021-29672 · GHSA-mxfj-3796-w53x

Out-of-bounds write in IBM Spectrum Protect for Space Management

LOW 34

IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00345 Published 2021-04-26 No fix listed CWE-787

TI-2021-03785 CVE-2021-20546 · GHSA-x4wg-5xxw-qhh7

Out-of-bounds write in IBM Spectrum Protect for Space Management

LOW 24

IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00266 Published 2021-04-26 No fix listed CWE-787

TI-2020-03837 CVE-2020-4494 · GHSA-gww9-rjpc-m25m

Improper authentication in IBM Spectrum Protect for Space Management

LOW 37

IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02285 Published 2020-06-15 No fix listed CWE-287

TI-2020-03781 CVE-2020-4406 · GHSA-hfrq-mhmh-565m

Clickjacking in IBM Spectrum Protect Client

LOW 26

IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00823 Published 2020-06-15 No fix listed CWE-1021

TI-2018-01574 CVE-2018-1785 · GHSA-2h55-w7q6-9v78

IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected…

LOW 35

IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01128 Published 2018-09-26 No fix listed CWE-326

TI-2018-01402 CVE-2018-1545 · GHSA-mjh9-7rc2-mx92

IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected…

LOW 35

IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00966 Published 2018-09-26 No fix listed CWE-326

Vulnerabilities

Filters