spectrum_protect_plus Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/spectrum_protect_plus/ Sun, 26 Feb 2023 06:42:12 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png spectrum_protect_plus Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/spectrum_protect_plus/ 32 32 CVE-2020-5022 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-5022/ Sun, 26 Feb 2023 06:42:12 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-5022/ IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which can result in an attacker obtaining information they are not authorized to access. IBM X-Force ID: 193658.

The post CVE-2020-5022 appeared first on CVE Vulnerability.

]]> IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which can result in an attacker obtaining information they are not authorized to access. IBM X-Force ID: 193658.

The post CVE-2020-5022 appeared first on CVE Vulnerability.

]]> CVE-2020-4854 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-4854/ Sun, 26 Feb 2023 06:42:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-4854/ IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 190454.

The post CVE-2020-4854 appeared first on CVE Vulnerability.

]]> IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 190454.

The post CVE-2020-4854 appeared first on CVE Vulnerability.

]]> CVE-2020-4783 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-4783/ Sun, 26 Feb 2023 06:42:07 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-4783/ IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 189214.

The post CVE-2020-4783 appeared first on CVE Vulnerability.

]]> IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 189214.

The post CVE-2020-4783 appeared first on CVE Vulnerability.

]]> CVE-2020-4497 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-4497/ Sun, 26 Feb 2023 06:42:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-4497/ IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in the communication flow between Spectrum Protect Plus vSnap and its agents. An attacker could obtain information using main in the middle techniques. IBM X-Force ID: 182106.

The post CVE-2020-4497 appeared first on CVE Vulnerability.

]]> IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in the communication flow between Spectrum Protect Plus vSnap and its agents. An attacker could obtain information using main in the middle techniques. IBM X-Force ID: 182106.

The post CVE-2020-4497 appeared first on CVE Vulnerability.

]]> CVE-2020-4496 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-4496/ Sun, 26 Feb 2023 06:42:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-4496/ The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent is subject to a man-in-the-middle attack due to improper certificate validation. IBM X-Force ID: 182046.

The post CVE-2020-4496 appeared first on CVE Vulnerability.

]]> The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent is subject to a man-in-the-middle attack due to improper certificate validation. IBM X-Force ID: 182046.

The post CVE-2020-4496 appeared first on CVE Vulnerability.

]]> CVE-2020-4477 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-4477/ Sun, 26 Feb 2023 06:42:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-4477/ IBM Spectrum Protect Plus 10.1.0 through 10.1.5 discloses highly sensitive information in plain text in the virgo log file which could be used in further attacks against the system. IBM X-Force ID: 181779.

The post CVE-2020-4477 appeared first on CVE Vulnerability.

]]> IBM Spectrum Protect Plus 10.1.0 through 10.1.5 discloses highly sensitive information in plain text in the virgo log file which could be used in further attacks against the system. IBM X-Force ID: 181779.

The post CVE-2020-4477 appeared first on CVE Vulnerability.

]]> CVE-2020-4471 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-4471/ Sun, 26 Feb 2023 06:42:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-4471/ IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions by send a specially crafted HTTP command to the remote server. IBM X-Force ID: 181726.

The post CVE-2020-4471 appeared first on CVE Vulnerability.

]]> IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions by send a specially crafted HTTP command to the remote server. IBM X-Force ID: 181726.

The post CVE-2020-4471 appeared first on CVE Vulnerability.

]]> CVE-2020-4206 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-4206/ Sun, 26 Feb 2023 06:41:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-4206/ IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary commands on the system in the context of root user, caused by improper validation of user-supplied input. IBM X-Force ID: 174966.

The post CVE-2020-4206 appeared first on CVE Vulnerability.

]]> IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary commands on the system in the context of root user, caused by improper validation of user-supplied input. IBM X-Force ID: 174966.

The post CVE-2020-4206 appeared first on CVE Vulnerability.

]]> CVE-2019-4652 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-4652/ Sun, 26 Feb 2023 06:33:27 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-4652/ IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963.

The post CVE-2019-4652 appeared first on CVE Vulnerability.

]]> IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963.

The post CVE-2019-4652 appeared first on CVE Vulnerability.

]]> CVE-2019-4383 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-4383/ Sun, 26 Feb 2023 06:33:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-4383/ When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected restore operation may result in an escalation of user privileges. IBM X-Force ID: 162165.

The post CVE-2019-4383 appeared first on CVE Vulnerability.

]]> When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected restore operation may result in an escalation of user privileges. IBM X-Force ID: 162165.

The post CVE-2019-4383 appeared first on CVE Vulnerability.

]]>