Skip to content
OpenAdvisories

Product · IBM

Spectrum Virtualize

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-25681

    IBM Spectrum Virtualize security bypass

    LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticat…

    IBM Spectrum Virtualize
  • Medium 5.9
    CVE-2023-27870

    IBM Spectrum Virtualize information disclosure

    IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a download from Fix Central is in progress. IBM X-Force ID: 249518.

    IBM Spectrum Virtualize
  • Medium 6.3
    CVE-2022-43873

    IBM Spectrum Virtualize privilege escalation

    An authenticated user can exploit a vulnerability in the IBM Spectrum Virtualize 8.2, 8.3, 8.4, and 8.5 GUI to execute code and escalate their privilege on the system. IBM X-Force ID: 239847.

    IBM Spectrum Virtualize
  • Medium 6.5
    CVE-2022-43870

    IBM Spectrum Virtualize information disclosure

    IBM Spectrum Virtualize 8.3, 8.4, and 8.5 could disclose SNMPv3 server credentials to an authenticated user in log files. IBM X-Force ID: 239540.

    IBM Spectrum Virtualize
  • Medium 5.9
    CVE-2022-39167

    IBM Spectrum Virtualize information disclosure

    IBM Spectrum Virtualize 8.5, 8.4, 8.3, 8.2, and 7.8, under certain configurations, could disclose sensitive information to an attacker using man-in-the-middle techniques. IBM X-Force ID: 235408.

    IBM Spectrum Virtualize
  • Medium 5.6
    CVE-2021-38969

    IBM Spectrum Virtualize 8.2, 8.3, and 8.4 could allow an attacker to allow unauthorized access due to the reuse of supp…

    IBM Spectrum Virtualize