Ibm Storage Protect Plus Server vulnerabilities

3 known vulnerabilities affecting ibm/storage_protect_plus_server.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2024-27277MEDIUMCVSS 5.5≥ 10.1.0, ≤ 10.1.162024-03-21

CVE-2024-27277 [MEDIUM] CWE-200 CVE-2024-27277: The private key for the IBM Storage Protect Plus Server 10.1.0 through 10.1.16 certificate can be di The private key for the IBM Storage Protect Plus Server 10.1.0 through 10.1.16 certificate can be disclosed, undermining the security of the certificate. IBM X-Force ID: 285205.

CVE-2023-47715MEDIUMCVSS 4.3≥ 10.1.0, ≤ 10.1.162024-03-21

CVE-2023-47715 [MEDIUM] CWE-269 CVE-2023-47715: IBM Storage Protect Plus Server 10.1.0 through 10.1.16 could allow an authenticated user with read-o IBM Storage Protect Plus Server 10.1.0 through 10.1.16 could allow an authenticated user with read-only permissions to add or delete entries from an existing HyperVisor configuration. IBM X-Force ID: 271538.

CVE-2023-47148HIGHCVSS 7.5≥ 10.1.0, ≤ 10.1.15.22024-02-02

CVE-2023-47148 [HIGH] CWE-862 CVE-2023-47148: IBM Storage Protect Plus Server 10.1.0 through 10.1.15.2 Admin Console could allow a remote attacker IBM Storage Protect Plus Server 10.1.0 through 10.1.15.2 Admin Console could allow a remote attacker to obtain sensitive information due to improper validation of unsecured endpoints which could be used in further attacks against the system. IBM X-Force ID: 270599.