PT-2019-16892 · Ibm · Ibm Spectrum Protect Server+1

Sébastien Charbonnier + 1 · Publicado 2019-07-02 · Atualizado 2022-12-09 · CVE-2019-4088

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Servers versions 7.1 through 8.1 IBM Spectrum Protect Storage Agents versions 7.1 through 8.1

Description A local attacker could gain elevated privileges on the system by loading a specially crafted library loaded by the dsmqsan module. This could allow the attacker to gain root privileges on the vulnerable system.

Recommendations For IBM Spectrum Protect Servers versions 7.1 through 8.1, consider restricting access to the dsmqsan module until a patch is available. For IBM Spectrum Protect Storage Agents versions 7.1 through 8.1, consider restricting access to the dsmqsan module until a patch is available.

Correção

Identificadores relacionados

CVE-2019-4088

Produtos afetados

Ibm Spectrum Protect Server

Ibm Spectrum Protect Storage Agents

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-4088 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/157511 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=ibm10882472 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-4088 · Nota de Segurança