Ibm Spectrum Protect Plus vulnerabilities

51 known vulnerabilities affecting ibm/spectrum_protect_plus.

Total CVEs

51

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL10HIGH17MEDIUM24

Vulnerabilities

Page 3 of 3

CVE-2020-4210CRITICALCVSS 9.8v10.1.0v10.1.52020-02-24

CVE-2020-4210 [CRITICAL] CWE-78 CVE-2020-4210: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175020.

CVE-2020-4222CRITICALCVSS 9.8v10.1.0v10.1.52020-02-24

CVE-2020-4222 [CRITICAL] CWE-78 CVE-2020-4222: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175091.

CVE-2020-4213CRITICALCVSS 9.8v10.1.0v10.1.52020-02-24

CVE-2020-4213 [CRITICAL] CWE-78 CVE-2020-4213: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175024.

CVE-2020-4211CRITICALCVSS 9.8v10.1.0v10.1.52020-02-24

CVE-2020-4211 [CRITICAL] CWE-78 CVE-2020-4211: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175022.

CVE-2020-4212CRITICALCVSS 9.8v10.1.0v10.1.52020-02-24

CVE-2020-4212 [CRITICAL] CWE-20 CVE-2020-4212: IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175023.

CVE-2019-4703MEDIUMCVSS 5.3≥ 10.1.0, ≤ 10.1.5v10.1.0+1 more2020-02-24

CVE-2019-4703 [MEDIUM] CVE-2019-4703: IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, co IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, could allow an attacker with intimate knowledge of the system to obtain highly sensitive information.

CVE-2019-4652HIGHCVSS 7.1≥ 10.1.0, ≤ 10.1.4v10.1.0+1 more2019-11-12

CVE-2019-4652 [HIGH] CWE-276 CVE-2019-4652: IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963.

CVE-2019-4357MEDIUMCVSS 6.7v10.1.1v10.1.2+2 more2019-07-01

CVE-2019-4357 [MEDIUM] CVE-2019-4357: When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB da When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore operation specifying a target path may allow execution of arbitrary code on the system. IBM X-Force ID: 161667,

CVE-2019-4383MEDIUMCVSS 6.7v10.1.1v10.1.2+2 more2019-07-01

CVE-2019-4383 [MEDIUM] CVE-2019-4383: When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databas When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected restore operation may result in an escalation of user privileges. IBM X-Force ID: 162165.

CVE-2019-4385MEDIUMCVSS 6.5≥ 10.1.2.219, ≤ 10.1.2.303v10.1.22019-06-19

CVE-2019-4385 [MEDIUM] CWE-522 CVE-2019-4385: IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plu IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog. This can result in an attacker gaining access to sensitive information as well as vSnap. IBM X-Force ID: 162173.

CVE-2018-1768HIGHCVSS 7.8v10.1.0v10.1.12018-09-26

CVE-2018-1768 [HIGH] CWE-532 CVE-2018-1768: IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a test operation, the user id an password may be displayed in plain text within an instrumentation log file. IBM X-Force ID: 148622.

← Previous3 / 3