Aller au contenu

Vulnérabilités connues pour IBM Spectrum Protect Plus

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2020-4497 IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in… 6.8 Moyenne 14 déc. 2022
CVE-2022-40608 IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the… 5.9 Moyenne 19 sept. 2022
CVE-2022-40234 Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a… 5.9 Moyenne 19 sept. 2022
CVE-2022-22472 IBM Spectrum Protect Plus Container Backup and Restore (10.1.5 through 10.1.10.2 for Kubernetes and 10.1.7 through… 6.0 Moyenne 30 juin 2022
CVE-2022-22396 Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in… 6.8 Moyenne 6 juin 2022
CVE-2022-22354 IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do… 6.2 Moyenne 14 mars 2022
CVE-2021-39063 IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing (CORS) which could allow an… 6.5 Moyenne 13 déc. 2021
CVE-2021-39057 IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF) 4.2 Moyenne 13 déc. 2021
CVE-2020-4496 The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent… 6.8 Moyenne 13 déc. 2021
CVE-2021-20490 IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure… 4.0 Moyenne 29 juin 2021
CVE-2021-29694 IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic algorithms that could allow an… 5.9 Moyenne 26 avr. 2021
CVE-2021-20536 IBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1.7 stores potentially sensitive information in log files… 6.2 Moyenne 26 avr. 2021
CVE-2021-20432 IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-Origin Resource Sharing (CORS) which could allow an… 6.5 Moyenne 26 avr. 2021
CVE-2020-5023 IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause… 7.5 Élevée 10 févr. 2021
CVE-2020-5022 IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which… 5.3 Moyenne 8 janv. 2021
CVE-2020-5021 IBM Spectrum Protect Plus 10.1.0 through 10.1.6 does not invalidate session after a password reset which could allow a… 4.0 Moyenne 8 janv. 2021
CVE-2020-5020 IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to hijack the clicking action of the… 6.1 Moyenne 8 janv. 2021
CVE-2020-5019 IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of… 6.5 Moyenne 8 janv. 2021
CVE-2020-5018 IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may include sensitive information in its URLs increasing the risk of… 3.7 Faible 8 janv. 2021
CVE-2020-5017 IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow a local user to obtain access to information beyond their… 2.9 Faible 8 janv. 2021
CVE-2020-4854 IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic… 9.8 Critique 23 nov. 2020
CVE-2020-4783 IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to obtain sensitive information, caused by… 5.9 Moyenne 23 nov. 2020
CVE-2020-4711 IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to traverse directories on the system 6.5 Moyenne 15 sept. 2020
CVE-2020-4703 IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload… 8.0 Élevée 15 sept. 2020
CVE-2020-4631 IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned… 5.1 Moyenne 4 août 2020

Autres produits IBM