← Back

CVE-2025-3319

nvd nist
Published: Jun 20, 2025Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

IBM Spectrum Protect Server 8.1 through 8.1.26 could allow attacker to bypass authentication due to improper session authentication which can result in access to unauthorized resources.

Affected (1)

Ibm
1 product
Spectrum Protect Server
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Spectrum Protect Server
From 8.1.0.0 to 8.1.26

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.