Vulnerabilities > CVE-2019-4357 - Unspecified vulnerability in IBM Spectrum Protect Plus 10.1.1/10.1.2/10.1.3

047910
CVSS 6.7 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
ibm
NVD
Published: 2019-07-01
Updated: 2024-11-21

Summary

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore operation specifying a target path may allow execution of arbitrary code on the system. IBM X-Force ID: 161667,

Vulnerable Configurations

Part Description Count
Application
Ibm
3

References