CVE-2021-39057

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF)

Medium · published December 13, 2021

CVSS v3.0
4.2
EPSS
1%
Percentile
42.0
In the wild
Unconfirmed
What it is

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 214616.

The record
Technical detail
CVSS v3.0
4.2 · MEDIUM
Vector
CVSS:3.0/AV:N/UI:N/C:L/I:L/A:N/S:U/PR:L/AC:H/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.00502 · 42.0th percentile
Published
2021-12-13T18:35Z
EPSS history
Timeline
  • 13 DEC 18:35Z
    IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF)
    cvelistv5