CVE-2019-4357

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore operation specifying a target…

High · published July 1, 2019

CVSS v3.0
8.2
EPSS
0%
Percentile
38.7
In the wild
Unconfirmed
What it is

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore operation specifying a target path may allow execution of arbitrary code on the system. IBM X-Force ID: 161667,

The record
Technical detail
CVSS v3.0
8.2 · HIGH
Vector
CVSS:3.0/A:H/S:C/I:H/UI:N/C:H/PR:H/AC:L/AV:L/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00458 · 38.7th percentile
Published
2019-07-01T15:05Z
EPSS history
Timeline
  • 01 JUL 15:05Z
    When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore operation specifying a target…
    cvelistv5