CVE-2018-2025

Published: Nov 25, 2019Modified: Nov 21, 2024

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 1.8 / Impact: 2.5

Source: NVD

Description

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551.

Affected (6)

Products: Ibm: Spectrum Protect, Spectrum Protect For Virtual Environments

Ibm

2 products

Spectrum Protect

Spectrum Protect For Virtual Environments

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Spectrum Protect	7.1.0.0 ≤ version ≤ 7.1.8.5
Ibm Spectrum Protect	8.1.0.0 ≤ version ≤ 8.1.8.0
Ibm Spectrum Protect For Virtual Environments	7.1.0.0 ≤ version ≤ 7.1.8.5
Ibm Spectrum Protect For Virtual Environments	8.1.0.0 ≤ version ≤ 8.1.8.0
Ibm Spectrum Protect For Virtual Environments	7.1.0.0 ≤ version ≤ 7.1.8.5
Ibm Spectrum Protect For Virtual Environments	8.1.0.0 ≤ version ≤ 8.1.8.0