Remote Access Control Bypass Vulnerability in IBM Spectrum Protect
CVE-2022-22394
7.5HIGH
Summary
The IBM Spectrum Protect server version 8.1.14.000 is susceptible to a vulnerability that allows remote attackers to bypass established security restrictions. This security flaw arises from inadequately enforced access controls, enabling a malicious user to log in and exploit the oversight. Consequently, the attacker may gain unauthorized administrative or node access to the compromised server, posing significant risks to data integrity and system confidentiality.
Affected Version(s)
Spectrum Protect Server 8.1.14.000
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved