Remote Access Control Bypass Vulnerability in IBM Spectrum Protect
CVE-2022-22394

7.5HIGH

Key Information:

Vendor

IBM
Status
Spectrum Protect Server
Vendor
CVE Published:
21 March 2022

What is CVE-2022-22394?

The IBM Spectrum Protect server version 8.1.14.000 is susceptible to a vulnerability that allows remote attackers to bypass established security restrictions. This security flaw arises from inadequately enforced access controls, enabling a malicious user to log in and exploit the oversight. Consequently, the attacker may gain unauthorized administrative or node access to the compromised server, posing significant risks to data integrity and system confidentiality.

Affected Version(s)

Spectrum Protect Server 8.1.14.000

References

https://www.ibm.com/support/pages/node/6564745
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/222147
vdb-entryx_refsource_XF

EPSS Score

5% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.