Description
IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory traversal attack. This results in the restore operation gaining access to files which the operator should not have access to. IBM X-Force ID: 235873.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Spectrum Protect Plus | 10.1.6, 10.1.11 | — |
Advisories 1
- WID-SEC-2022-1461 IBM Spectrum Protect: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 20, 2023