High 1 exploited CVE WID-SEC-2023-0426 25 CVEs

IBM Spectrum Protect: Mehrere Schwachstellen

Published Mar 13, 2022 · Updated Jan 6, 2025 · Revision 3 · de-DE

Vendor: IBM Product: Maximo Asset Management Product: Spectrum Protect Product: Spectrum Protect Plus Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen 'Denial of Service'-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, einen 'Cross-Site-Scripting'-Angriff durchzuführen, beliebigen Code auszuführen, sensible Informationen offenzulegen und seine Privilegien zu erweitern.

Product

IBM Spectrum Protect ist eine zentralisierte Backuplösung für Systeme im Netzwerk.

Vulnerabilities 25

High 7.8

CVE-2021-4034 Exploited · Ransomware Public exploit EPSS 95%

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid too…

policykit-1 policykit-1 polkit polkit Debian Ubuntu Azure Linux Alpine

Jan 28, 2022
KEV Jun 27, 2022
Critical 9.8

CVE-2021-33026 Public exploit

Deserialization of Untrusted Data in Flask-Caching

The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains access to cache storage (e.g., filesystem, Memcached, Redis, etc.), they can c…

flask-caching flask-caching Debian PyPI

May 13, 2021
High 8.8

CVE-2022-0235

Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

node-fetch node-fetch/node-fetch node-fetch node-fetch Debian Ubuntu npm

Jan 16, 2022
High 8.7

CVE-2021-29678

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user wi…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 9, 2021
High 7.5

CVE-2021-23727

Stored Command Injection

This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manip…

celery celery celery Debian Ubuntu PyPI

Dec 29, 2021
High 7.5

CVE-2021-35517 EPSS 11%

Apache Commons Compress 1.1 to 1.20 denial of service vulnerability

When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Co…

Apache Software Foundation Apache Commons Compress org.apache.commons:commons-compress libcommons-compress-java Debian Ubuntu Azure Linux Maven

Jul 13, 2021
High 7.5

CVE-2021-36090 EPSS 13%

Apache Commons Compress 1.0 to 1.20 denial of service vulnerability

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Co…

Apache Software Foundation Apache Commons Compress org.apache.commons:commons-compress libcommons-compress-java Debian Ubuntu Azure Linux Maven

Jul 13, 2021
High 7.5

CVE-2021-44716

golang.org/x/net/http2 allows uncontrolled memory consumption

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go

Jan 1, 2022
High 7.5

CVE-2022-0391

A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locat…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux

Feb 9, 2022
High 7.5

CVE-2022-21680

Cubic catastrophic backtracking (ReDoS) in marked

Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `block.def` may cause catastrophic backtracking against some strings and lead to a regular expression denial of service (ReDoS). Anyone who runs untrusted markdown throu…

markedjs marked marked node-marked Debian Ubuntu npm

Jan 14, 2022
High 7.5

CVE-2022-21681

Exponential catastrophic backtracking (ReDoS) in marked

Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `inline.reflinkSearch` may cause catastrophic backtracking against some strings and lead to a denial of service (DoS). Anyone who runs untrusted markdown through a vulne…

markedjs marked marked node-marked Debian Ubuntu npm

Jan 14, 2022
Medium 6.5

CVE-2021-38931

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclo…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 9, 2021
Medium 6.2

CVE-2022-22354

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do n…

IBM Spectrum Protect Plus Spectrum Copy Data Management

Mar 14, 2022
Medium 5.9

CVE-2021-20373

IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as u…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 9, 2021
Medium 5.9

CVE-2021-39002

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expe…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 9, 2021
Medium 5.5

CVE-2021-38926

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local u…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 9, 2021
Medium 5.3

CVE-2021-35578

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 4.3

CVE-2022-22346

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to cross-site request forgery which c…

IBM Spectrum Protect Operations Center

Mar 14, 2022
Medium 4.0

CVE-2022-22348

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could …

IBM Spectrum Protect Operations Center

Mar 14, 2022
Unscored —

CVE-2021-23222

A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certi…

postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Azure Linux Alpine

Mar 2, 2022
Unscored —

CVE-2021-41617 Public exploit

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalati…

openssh openssh openssh-ssh1 openssh Debian Ubuntu Alpine

Sep 26, 2021
Unscored —

CVE-2021-44717

Misdirected I/O in syscall

Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion.

go stdlib golang-1.8 golang-1.17 Debian Ubuntu Alpine Go

Jan 1, 2022
Unscored —

CVE-2022-23772

Uncontrolled memory consumption in math/big

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go

Feb 11, 2022
Unscored —

CVE-2022-23773 Public exploit

Incorrect access control in the go command in cmd/go/internal/modfetch

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

golang go golang-1.8 golang-1.13 Debian Ubuntu Azure Linux Alpine Go

Feb 11, 2022
Unscored —

CVE-2022-23806

Incorrect computation for some invalid field elements in crypto/elliptic

Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.

golang go stdlib lxd Debian Ubuntu Azure Linux Alpine Go

Feb 11, 2022

Revision history

2025-01-06 #3
Neue Updates von IBM aufgenommen
2023-02-19 #2
Neue Updates von IBM aufgenommen
2022-03-13 #1
Initiale Fassung

References

IBM Security Advisory vom 2022-03-13
https://www.ibm.com/support/pages/node/6562989
IBM Security Advisory vom 2022-03-13
https://www.ibm.com/support/pages/node/6562383
IBM Security Advisory vom 2022-03-13
https://www.ibm.com/support/pages/node/6562855
IBM Security Advisory vom 2022-03-13
https://www.ibm.com/support/pages/node/6562401
IBM Security Advisory vom 2022-03-13
https://www.ibm.com/support/pages/node/6562919
IBM Security Advisory vom 2022-03-13
https://www.ibm.com/support/pages/node/6562873
IBM Security Advisory vom 2022-03-13
https://www.ibm.com/support/pages/node/6562843
IBM Security Advisory vom 2022-03-13
https://www.ibm.com/support/pages/node/6562405
IBM Security Bulletin 6956658 vom 2023-02-18
https://www.ibm.com/support/pages/node/6956658
IBM Security Bulletin 7180361 vom 2025-01-07
https://www.ibm.com/support/pages/node/7180361