Skip to content
OpenAdvisories
Medium · 4.2 CVE-2021-39057 EUVD-2021-25494GHSA-r95c-3gx6-f23p

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow an authenticated at…

Published Dec 13, 2021 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 214616.

Affected products

VendorProductAffectedFixed
IBM Spectrum Protect Plus 10.1.0.0, 10.1.8.0 —

References