Spectrum Protect Server

spectrum_protect_server

Vendor: Ibm • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-3319 1Ibm 1Spectrum Protect Server Jun 17, 2026 Jun 20, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM Spectrum Protect Server 8.1 through 8.1.26 could allow attacker to bypass authentication due to improper session authentication which can result in access to unauthorized resources.
CVE-2022-22496 1Ibm 1Spectrum Protect Server Jun 17, 2026 Jun 30, 2022 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be configured to use SESSIONSECURITY=TRANSITIONAL. While in this mode, it may be susceptible to an offline di...Show more While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be configured to use SESSIONSECURITY=TRANSITIONAL. While in this mode, it may be susceptible to an offline dictionary attack. IBM X-Force ID: 226942.Show less
CVE-2022-22487 1Ibm 1Spectrum Protect Server Jun 17, 2026 Jun 30, 2022 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 An IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimited attempts to login to the storage agent without locking the administrative ID. A remote attacker co...Show more An IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimited attempts to login to the storage agent without locking the administrative ID. A remote attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to both the IBM Spectrum Protect storage agent and the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 with which it communicates. IBM X-Force ID: 226326.Show less
CVE-2020-4591 1Ibm 1Spectrum Protect Server Jun 17, 2026 Aug 28, 2020 N/A· v4 3.3 LOW· v3 1.9 LOW· v2 IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool. IBM X-...Show more IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool. IBM X-Force ID: 184746.Show less
CVE-2018-1788 1Ibm 1Spectrum Protect Server Nov 21, 2024 Nov 2, 2018 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force ID: 148873.