PT-2021-13990 · Ibm · Ibm Spectrum Protect Plus

Published 2021-06-29 · Updated 2021-06-30 · CVE-2021-20490

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Plus versions 10.1.0 through 10.1.8

Description: The issue is related to insecure file permission settings, which could allow a local user to cause a denial of service.

Recommendations: For IBM Spectrum Protect Plus versions 10.1.0 through 10.1.8, update the file permission settings to secure ones to prevent a local user from causing a denial of service.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2021-20490

Affected Products

Ibm Spectrum Protect Plus

References · 4

• https://osv.dev/vulnerability/CVE-2021-20490 · Vendor Advisory
• https://ibm.com/support/pages/node/6466609 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20490 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/197791 · Vendor Advisory