Medium · 4.4 CVE-2023-27863 EUVD-2023-31598GHSA-8vwj-f33x-4pw9

IBM Spectrum Protect Plus Server information disclosure

Published May 12, 2023 · Updated Jan 23, 2025 · Assigned by ibm

Vendor: IBM Product: Spectrum Protect Plus Server

Description

IBM Spectrum Protect Plus Server 10.1.13, under specific configurations, could allow an elevated user to obtain SMB credentials that may be used to access vSnap data stores. IBM X-Force ID: 249325.

Affected products

Vendor	Product	Affected	Fixed
IBM	Spectrum Protect Plus Server	10.1.13	—

Advisories 1

WID-SEC-2023-0740 IBM Spectrum Protect: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Mar 23, 2023

References

https://www.ibm.com/support/pages/node/6965812 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/249325 vdb-entry