CVE-2023-27863

published 2023-05-12

CVE-2023-27863: IBM Spectrum Protect Plus Server 10.1.13, under specific configurations, could allow an elevated user to obtain SMB credentials that may be used to access…

Priority P4 24 medium 4.9 CVSS 3.1

AV N AC L PR H UI N S U C H I N A N

IBM Spectrum Protect Plus Server 10.1.13, under specific configurations, could allow an elevated user to obtain SMB credentials that may be used to access vSnap data stores. IBM X-Force ID: 249325.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	spectrum_protect	—	—
ibm	spectrum_protect_plus_server	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200