PT-2023-21381 · Ibm · Ibm Spectrum Protect Server

Publicado 2023-05-12 · Atualizado 2023-05-19 · CVE-2023-27863

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus Server version 10.1.13

Description The issue allows an elevated user to obtain SMB credentials under specific configurations, which may be used to access vSnap data stores.

Recommendations For IBM Spectrum Protect Plus Server version 10.1.13, consider restricting access to sensitive data stores and limiting user privileges to minimize the risk of exploitation until a patch is available. As a temporary workaround, review and secure SMB credential storage and access controls.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2023-27863

Produtos afetados

Ibm Spectrum Protect Server

Referências · 6

• https://osv.dev/vulnerability/CVE-2023-27863 · Aviso do Fabricante
• https://ibm.com/support/pages/node/6965812 · Aviso do Fabricante
• https://t.me/cibsecurity/64054 · Publicação no Telegram
• https://t.me/cvenotify/50350 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-27863 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/249325 · Aviso do Fabricante