PT-2022-15452 · Ibm · Ibm Spectrum Protect Plus

Published 2022-06-30 · Updated 2022-07-12 · CVE-2022-22472

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus Container Backup and Restore versions 10.1.5 through 10.1.10.2 for Kubernetes IBM Spectrum Protect Plus Container Backup and Restore versions 10.1.7 through 10.1.10.2 for Red Hat OpenShift

Description The issue is caused by improper disclosure of session information, allowing a remote attacker to bypass role-based access control restrictions. By retrieving the logs of a container, an attacker could exploit this to bypass login security and gain unauthorized access based on the permissions of the IBM Spectrum Protect Plus user.

Recommendations For versions 10.1.5 through 10.1.10.2 for Kubernetes, consider restricting access to the container logs to minimize the risk of exploitation. For versions 10.1.7 through 10.1.10.2 for Red Hat OpenShift, consider restricting access to the container logs to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

CVE-2022-22472

Affected Products

Ibm Spectrum Protect Plus

References · 7

• https://ibm.com/support/pages/node/6596907 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22472 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22472 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/225340 · Vendor Advisory
• https://t.me/cvenotify/32928 · Telegram Post
• https://t.me/cvenotify/32443 · Telegram Post
• https://t.me/cibsecurity/45417 · Telegram Post