description: IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow an attacker to bypass authentication due to improper session validation which can result in access to unauthorized resources. IBM X-Force ID: 182019.
problem types: Obtain Information
affected:
{
product: Spectrum Protect for Space Management (Linux)
vendor: IBM
versions:
status: affected, version: 8.1.7.0
status: affected, version: 8.1.9.1
}
{
product: Spectrum Protect for Space Management (AIX)
vendor: IBM
versions:
status: affected, version: 8.1.9.0
status: affected, version: 8.1.9.1
}
{
product: Spectrum Protect Client (AIX)
vendor: IBM
versions:
status: affected, version: 8.1.9.0
status: affected, version: 8.1.9.1
}
{
product: Spectrum Protect Client (Linux and Windows)
vendor: IBM
versions:
status: affected, version: 8.1.7.0
status: affected, version: 8.1.9.1
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
exploitCodeMaturity: UNPROVEN
integrityImpact: NONE
privilegesRequired: NONE
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 6.5
temporalSeverity: MEDIUM
userInteraction: NONE
vectorString: CVSS:3.0/I:N/A:N/S:U/UI:N/C:H/AC:L/PR:N/AV:N/RL:O/RC:C/E:U
version: 3.0
]