IBM Spectrum Protect Backup Archive Client vulnerabilities
8 vulnerabilities
Known vulnerabilities in IBM Spectrum Protect Backup Archive Client, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-2025ibmspectrum_protect+2
EPSS score0.31%
IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551.CVE-2018-1787ibmspectrum_protect+2EPSS score0.30%
IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872.CVE-2018-1853ibmspectrum_protect+1EPSS score1.18%
IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 151014.CVE-2018-1882ibmspectrum_protect+3EPSS score0.22%
In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file. IBM X-Force ID: 151968.CVE-2021-20532ibmspectrum_protect_backup-archive_client+1EPSS score0.21%
IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their privileges to take full control of the system due to insecure directory permissions. IBM X-Force ID: 198811.CVE-2021-39048ibmspectrum_protect+2EPSS score0.29%
IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 214438.CVE-2019-4406ibmspectrum_protect_backup-archive_clientEPSS score0.30%
IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing issue between client and server TCP/IP communications. IBM X-Force ID: 162477.CVE-2023-28956ibmspectrum_protect_backup-archive_clientEPSS score0.16%
IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls.