CVE-2022-22394

The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls

High · published March 21, 2022

CVSS v3.0
7.5
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the vulnerable server.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/C:H/UI:N/I:H/AV:N/PR:L/AC:H/A:H/S:U/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.02211 · 82.5th percentile
Published
2022-03-21T16:20Z
EPSS history
Timeline
  • 21 MAR 16:20Z
    The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls
    cvelistv5