CVE-2022-22394 PUBLISHED CVSS 7.5 HIGH

The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the vulnerable server.

EPSS 5.33% · 90.0th percentile

Risk Scores

CVSS v3.0
7.5
CVSS:3.0/C:H/UI:N/I:H/AV:N/PR:L/AC:H/A:H/S:U/E:U/RL:O/RC:C
EPSS Score
5.33%
90.0th percentile

Affected Products

VendorProductVersions
ibmspectrum_protect8.1.14.100
IBMSpectrum Protect Server8.1.14.000

Timeline

References

Open in Interactive Console →