IBM Spectrum Protect Plus Multiple Security Vulnerabilities

Bugtraq ID:	109003
Class:	Unknown
CVE:	CVE-2019-4383 CVE-2019-4357
Remote:	No
Local:	Yes
Published:	Jun 27 2019 12:00AM
Updated:	Jun 27 2019 12:00AM
Credit:	The vendor has reported these issues.
Vulnerable:	IBM Spectrum Protect Plus 10.1.3 IBM Spectrum Protect Plus 10.1.2 IBM Spectrum Protect Plus 10.1.1
Not Vulnerable:	IBM Spectrum Protect Plus 10.1.4

IBM Spectrum Protect Plus Multiple Security Vulnerabilities

IBM Spectrum Protect Plus is prone to multiple security vulnerabilities.

An attacker can leverage these issues to gain elevated privileges or execute arbitrary code in the context of a privileged process. Failed attacks may cause a denial-of-service condition.

IBM Spectrum Protect Plus Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Spectrum Protect Plus Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Spectrum Protect Plus Multiple Security Vulnerabilities

References:

• IBM Homepage (IBM)
  
• Privilege escalation and code injection vulnerabilities in IBM Spectrum Protect (IBM)