Skip to content
OpenAdvisories
Medium WID-SEC-2023-1497 3 CVEs

IBM Spectrum Protect: Mehrere Schwachstellen

Published Jun 18, 2023 · Updated Jun 23, 2025 · Revision 2 · de-DE

Vendor: IBM Product: Spectrum Protect Product: Spectrum Protect Plus Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen Denial of Service Angriff durchzuführen, Dateien zu manipulieren oder Informationen offenzulegen.

Product

IBM Spectrum Protect ist eine zentralisierte Backuplösung für Systeme im Netzwerk.

Vulnerabilities 3

  • High 7.5
    CVE-2023-25577

    Werkzeug may allow high resource usage when parsing multipart form data with many fields

    Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug's multipart form data parser will parse an unlimited number of parts, including file parts. Parts can be a small amount of bytes, but each requires CPU time to parse an…

    pallets werkzeug kubeflow-pipelines-visualization-server werkzeug Debian Ubuntu Azure Linux Wolfi PyPI
  • High 7.5
    CVE-2023-30861 Public exploit

    Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

    Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches `Set-Cookie` he…

    pallets flask python-flask flask Debian Ubuntu Azure Linux PyPI
  • Low 2.6
    CVE-2023-23934

    Wrkzeug's incorrect parsing of nameless cookies leads to __Host- cookies bypass

    Werkzeug is a comprehensive WSGI web application library. Browsers may allow "nameless" cookies that look like `=value` instead of `key=value`. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie l…

    pallets werkzeug kubeflow-pipelines-visualization-server werkzeug Debian Ubuntu Azure Linux Wolfi PyPI

Revision history

  1. #2

    Neue Updates von IBM aufgenommen

  2. #1

    Initiale Fassung

References