CVE-2022-40608

IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL…

Medium · published September 19, 2022

CVSS v3.0
5.9
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory traversal attack. This results in the restore operation gaining access to files which the operator should not have access to. IBM X-Force ID: 235873.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/A:N/I:N/PR:N/AC:H/C:H/AV:N/UI:N/S:U/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.01836 · 78.8th percentile
Published
2022-09-19T17:25Z
EPSS history
Timeline
  • 19 SEP 17:25Z
    IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL…
    cvelistv5