CVE-2018-2025

Published: Nov 25, 2019Modified: Nov 21, 2024

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 1.8 / Impact: 2.5

Source: NVD

Description

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551.

Affected (6)

Products: Ibm: Spectrum Protect, Spectrum Protect For Virtual Environments

Ibm

2 products

Spectrum Protect

Spectrum Protect For Virtual Environments

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Spectrum Protect	From 7.1.0.0 to 7.1.8.5
Ibm Spectrum Protect	From 8.1.0.0 to 8.1.8.0
Ibm Spectrum Protect For Virtual Environments	From 7.1.0.0 to 7.1.8.5
Ibm Spectrum Protect For Virtual Environments	From 8.1.0.0 to 8.1.8.0
Ibm Spectrum Protect For Virtual Environments	From 7.1.0.0 to 7.1.8.5
Ibm Spectrum Protect For Virtual Environments	From 8.1.0.0 to 8.1.8.0