Vulnerabilities > IBM > Spectrum Protect > 7.1.0.0

DATE CVE VULNERABILITY TITLE RISK
2020-08-28 CVE-2020-4559 Improper Input Validation vulnerability in IBM Spectrum Protect
IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input.
network
low complexity
ibm CWE-20
5.0
2020-04-23 CVE-2020-4415 Out-of-bounds Write vulnerability in IBM Spectrum Protect
IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking.
network
low complexity
ibm CWE-787
critical
10.0
2019-11-25 CVE-2018-2025 Incorrect Default Permissions vulnerability in IBM products
IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone.
local
low complexity
ibm CWE-276
3.6
2019-07-22 CVE-2019-4267 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in IBM Spectrum Protect
The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow.
local
low complexity
ibm CWE-119
7.8
2019-07-22 CVE-2019-4236 Data Processing Errors vulnerability in IBM Spectrum Protect
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (ACL) entries from backup or archive if there are more than twelve ACL entries associated with the object in total.
local
low complexity
ibm CWE-19
4.4
2019-07-02 CVE-2019-4140 Information Exposure vulnerability in IBM Spectrum Protect
IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databases by restoring old data.
local
low complexity
ibm CWE-200
7.1