Vulnerabilities > CVE-2023-47148 - Unspecified vulnerability in IBM Spectrum Protect Plus

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

ibm

NVD

Published: 2024-02-02

Updated: 2024-11-21

Summary

IBM Storage Protect Plus Server 10.1.0 through 10.1.15.2 Admin Console could allow a remote attacker to obtain sensitive information due to improper validation of unsecured endpoints which could be used in further attacks against the system. IBM X-Force ID: 270599.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Spectrum Protect Plus 10.1.0 IBM Spectrum Protect Plus 10.1.1 IBM Spectrum Protect Plus 10.1.1.142 IBM Spectrum Protect Plus 10.1.2 IBM Spectrum Protect Plus 10.1.2.209 IBM Spectrum Protect Plus 10.1.2.219 IBM Spectrum Protect Plus 10.1.2.247 IBM Spectrum Protect Plus 10.1.2.271 IBM Spectrum Protect Plus 10.1.2.303 IBM Spectrum Protect Plus 10.1.2.350 IBM Spectrum Protect Plus 10.1.3 IBM Spectrum Protect Plus 10.1.3.236 IBM Spectrum Protect Plus 10.1.3.286 IBM Spectrum Protect Plus 10.1.4 IBM Spectrum Protect Plus 10.1.4.145 IBM Spectrum Protect Plus 10.1.4.179 IBM Spectrum Protect Plus 10.1.4.222 IBM Spectrum Protect Plus 10.1.4.254 IBM Spectrum Protect Plus 10.1.4.277 IBM Spectrum Protect Plus 10.1.5 IBM Spectrum Protect Plus 10.1.5.2130 IBM Spectrum Protect Plus 10.1.5.2153 IBM Spectrum Protect Plus 10.1.5.2181 IBM Spectrum Protect Plus 10.1.5.2199 IBM Spectrum Protect Plus 10.1.6 IBM Spectrum Protect Plus 10.1.7 IBM Spectrum Protect Plus 10.1.8 IBM Spectrum Protect Plus 10.1.8.1 IBM Spectrum Protect Plus 10.1.9.2 IBM Spectrum Protect Plus 10.1.9.3 IBM Spectrum Protect Plus 10.1.10 IBM Spectrum Protect Plus 10.1.10.2 IBM Spectrum Protect Plus 10.1.11	37
OS	Linux Linux Linux Kernel -	1

Summary

Vulnerable Configurations

References