Spectrum Protect Plus

29 results · Clear filters · Feed

• Medium 6.8
  CVE-2020-4497

  IBM Spectrum Protect Plus information disclosure

  IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in the communication flow between Spectrum Protect Plus vSnap and its agents. An attacker could obtain information using main in the middle tec…

  IBM Spectrum Protect Plus
  Dec 14, 2022
• Medium 5.9
  CVE-2022-40608

  IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the …

  IBM Spectrum Protect Plus
  Sep 19, 2022
• Medium 5.9
  CVE-2022-40234

  Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a ce…

  IBM Spectrum Protect Plus
  Sep 19, 2022
• Medium 6.0
  CVE-2022-22472

  IBM Spectrum Protect Plus Container Backup and Restore (10.1.5 through 10.1.10.2 for Kubernetes and 10.1.7 through 10.1…

  IBM Spectrum Protect Plus
  Jun 30, 2022
• Medium 6.8
  CVE-2022-22396

  Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in cert…

  IBM Spectrum Protect Plus
  Jun 6, 2022
• Medium 6.2
  CVE-2022-22354

  IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do n…

  IBM Spectrum Protect Plus Spectrum Copy Data Management
  Mar 14, 2022
• Medium 6.5
  CVE-2021-39063

  IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing (CORS) which could allow an atta…

  IBM Spectrum Protect Plus
  Dec 13, 2021
• Medium 4.2
  CVE-2021-39057

  IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow…

  IBM Spectrum Protect Plus
  Dec 13, 2021
• Medium 6.8
  CVE-2020-4496

  The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agen…

  IBM Spectrum Protect Plus
  Dec 13, 2021
• Medium 4.0
  CVE-2021-20490

  IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure f…

  IBM Spectrum Protect Plus
  Jun 29, 2021
• Medium 5.9
  CVE-2021-29694

  IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic algorithms that could allow an …

  IBM Spectrum Protect Plus
  Apr 26, 2021
• Medium 6.2
  CVE-2021-20536

  IBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1.7 stores potentially sensitive information in log files th…

  IBM Spectrum Protect Plus
  Apr 26, 2021
• Medium 6.5
  CVE-2021-20432

  IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker…

  IBM Spectrum Protect Plus
  Apr 26, 2021
• Medium 5.3
  CVE-2020-5022

  IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which c…

  IBM Spectrum Protect Plus
  Jan 8, 2021
• Medium 4.0
  CVE-2020-5021

  IBM Spectrum Protect Plus 10.1.0 through 10.1.6 does not invalidate session after a password reset which could allow a …

  IBM Spectrum Protect Plus
  Jan 8, 2021
• Medium 6.1
  CVE-2020-5020

  IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to hijack the clicking action of the vict…

  IBM Spectrum Protect Plus
  Jan 8, 2021
• Medium 6.5
  CVE-2020-5019

  IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation o…

  IBM Spectrum Protect Plus
  Jan 8, 2021
• Medium 5.9
  CVE-2020-4783

  IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to obtain sensitive information, caused b…

  IBM Spectrum Protect Plus
  Nov 23, 2020
• Medium 6.5
  CVE-2020-4711

  IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to traverse directories on the system. An…

  IBM Spectrum Protect Plus
  Sep 15, 2020
• Medium 5.1
  CVE-2020-4631

  IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned acc…

  IBM Spectrum Protect Plus
  Aug 4, 2020
• Medium 5.9
  CVE-2020-4565

  IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an attacker to obtain sensitive information due to insecure…

  IBM Spectrum Protect Plus
  Jun 26, 2020
• Medium 5.3
  CVE-2020-4477

  IBM Spectrum Protect Plus 10.1.0 through 10.1.5 discloses highly sensitive information in plain text in the virgo log f…

  IBM Spectrum Protect Plus
  Jun 15, 2020
• Medium 4.8
  CVE-2020-4471

  IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or…

  IBM Spectrum Protect Plus
  Jun 15, 2020
• Medium 5.4
  CVE-2020-4209

  IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An…

  IBM Spectrum Protect Plus
  May 4, 2020
• Medium 4.8
  CVE-2020-4240

  IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An…

  IBM Spectrum Protect Plus
  Mar 31, 2020
• Medium 5.3
  CVE-2019-4703

  IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, could allow an attack…

  IBM Spectrum Protect Plus
  Feb 24, 2020
• Medium 5.1
  CVE-2019-4652

  IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Win…

  IBM Spectrum Protect Plus
  Nov 12, 2019
• Medium 5.9
  CVE-2019-4385

  IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog. This can …

  IBM Spectrum Protect Plus
  Jun 19, 2019
• Medium 5.6
  CVE-2018-1768

  IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a tes…

  IBM Spectrum Protect Plus
  Sep 26, 2018