description: IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782.
problem types: Gain Access
affected:
{
product: Spectrum Protect Operations Center
vendor: IBM
versions:
status: affected, version: 7.1.0.000
status: affected, version: 8.1.0.000
status: affected, version: 7.1.10
status: affected, version: 8.1.9
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 9.1
baseSeverity: CRITICAL
confidentialityImpact: HIGH
exploitCodeMaturity: UNPROVEN
integrityImpact: HIGH
privilegesRequired: NONE
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 7.9
temporalSeverity: HIGH
userInteraction: NONE
vectorString: CVSS:3.0/I:H/AC:L/A:N/UI:N/PR:N/S:U/AV:N/C:H/RL:O/E:U/RC:C
version: 3.0
]