CVE-2019-4088

published 2019-07-02

CVE-2019-4088: IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused by loading a…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused by loading a specially crafted library loaded by the dsmqsan module. By setting up such a library, a local attacker could exploit this vulnerability to gain root privileges on the vulnerable system. IBM X-Force ID: 157511.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	spectrum_protect	—	—
ibm	spectrum_protect	—	—
ibm	spectrum_protect_operations_center	7.1.0.000 – 7.1.9.200	—
ibm	spectrum_protect_operations_center	8.1.0.000 – 8.1.7.000	—