PT-2019-17146 · Ibm · Ibm Spectrum Protect Plus

Publicado 2019-11-12 · Atualizado 2019-11-14 · CVE-2019-4652

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus versions 10.1.0 through 10.1.4

Description The issue allows a local user to obtain sensitive information or perform unauthorized actions due to insecure file permissions on restored files and directories in Windows.

Recommendations For IBM Spectrum Protect Plus versions 10.1.0 through 10.1.4, update to a version that addresses the insecure file permissions issue to prevent unauthorized access and actions.

Correção

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2019-4652

Produtos afetados

Ibm Spectrum Protect Plus

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-4652 · Nota de Segurança
• https://ibm.com/support/pages/node/1105683 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/170963 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-4652 · Aviso do Fabricante