deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-31032
Published: 2022-06-29
Description: Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.58 authorizations are not properly verified when creating projects or trackers from projects marked as templates. Users can get access to information in those template projects because the permissions model is not properly enforced. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://docs.tuleap.org/administration-guide/users-management/security/site-access.html; https://github.com/Enalean/tuleap/commit/7e221a9d1893c13407b[PII_REDACTED]7a76d8e5654; https://github.com/Enalean/tuleap/commit/cc38bcc59ce0c733ca915d95daec5f3082fb17ca
CVE: CVE-2022-31058
Published: 2022-06-29
Description: Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.95 Tuleap does not sanitize properly user inputs when constructing the SQL query to retrieve data for the tracker reports. An attacker with the capability to create a new tracker can execute arbitrary SQL queries. Users are advised to upgrade. There is no known workaround for this issue.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Enalean/tuleap/commit/b91bcd57c8344ec2a4c1833629e400cef4dd901a; https://github.com/Enalean/tuleap/security/advisories/GHSA-4v2p-rwq9-3vjf; https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=b91bcd57c8344ec2a4c1833629e400cef4dd901a
CVE: CVE-2022-31063
Published: 2022-06-29
Description: Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.111 the title of a document is not properly escaped in the search result of MyDocmanSearch widget and in the administration page of the locked documents. A malicious user with the capability to create a document could force victim to execute uncontrolled code. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/Enalean/tuleap/commit/c947975a4f1ff7bbfd7d5cd24a2e16bf12bd96d4; https://github.com/Enalean/tuleap/security/advisories/GHSA-4fx8-4ff3-96jf; https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=c947975a4f1ff7bbfd7d5cd24a2e16bf12bd96d4
CVE: CVE-2022-31110
Published: 2022-06-29
Description: RSSHub is an open source, extensible RSS feed generator. In commits prior to 5c[PII_REDACTED] passing some special values to the `filter` and `filterout` parameters can cause an abnormally high CPU. This results in an impact on the performance of the servers and RSSHub services which may lead to a denial of service. This issue has been fixed in commit 5c[PII_REDACTED] and all users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-1333
References: https://github.com/DIYgod/RSSHub/commit/5c[PII_REDACTED]b44a6e45c3c63e9eac2504abeb5b; https://github.com/DIYgod/RSSHub/issues/10045; https://github.com/DIYgod/RSSHub/security/advisories/GHSA-jvxx-v45p-v5vf
CVE: CVE-2013-2235
Published: 2022-06-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA
CVE: CVE-2013-2252
Published: 2022-06-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA
CVE: CVE-2013-4126
Published: 2022-06-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-2073
Published: 2022-06-29
Description: Code Injection in GitHub repository getgrav/grav prior to 1.7.34.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-94
References: https://github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83; https://huntr.dev/bounties/3ef640e6-9e25-4ecb-8ec1-64311d63fe66; https://github.com/getgrav/grav/commit/9d6a2dba09fd4e56f5cdfb9a399caea355bfeb83
CVE: CVE-2022-33057
Published: 2022-06-29
Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_reservation.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-5.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-5.md
CVE: CVE-2022-33058
Published: 2022-06-29
Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_message.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-6.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-6.md
CVE: CVE-2022-33059
Published: 2022-06-29
Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_train.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-7.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-7.md
CVE: CVE-2022-33060
Published: 2022-06-29
Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_schedule.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-8.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-8.md
CVE: CVE-2022-33061
Published: 2022-06-29
Description: Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_service.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-9.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-9.md
CVE: CVE-2021-40597
Published: 2022-06-29
Description: The firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://drive.google.com/file/d/1DZCzVULjchY0rSJBXIPr0gJM1qWCcAZ5/view?usp=sharing; https://drive.google.com/file/d/1ZPFwAoO8tAD0zrWwVZ9W6-CUCrcM0Exm/view?usp=sharing; https://www.edimax.com/edimax/download/download/data/edimax/global/download/
CVE: CVE-2022-30467
Published: 2022-06-29
Description: Joy ebike Wolf Manufacturing year 2022 is vulnerable to Denial of service, which allows remote attackers to jam the key fob request via RF.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-294
References: https://github.com/nsbogam/ebike-jammer; https://github.com/nsbogam/ebike-jammer/blob/main/README.md; https://github.com/nsbogam/ebike-jammer
CVE: CVE-2022-34835
Published: 2022-06-30
Description: In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/u-boot/u-boot/commit/8f8c04bf1ebbd2f72f1643e7ad9617dafa6e5409; https://lists.denx.de/pipermail/u-boot/2022-June/486113.html; https://source.denx.de/u-boot/u-boot/-/commit/8f8c04bf1ebbd2f72f1643e7ad9617dafa6e5409
CVE: CVE-2017-20121
Published: 2022-06-30
Description: A vulnerability was found in Teradici Management Console 2.2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Database Management. The manipulation leads to improper privilege management. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: http://seclists.org/fulldisclosure/2017/Feb/62; https://vuldb.com/?id.97279; http://seclists.org/fulldisclosure/2017/Feb/62
CVE: CVE-2017-20122
Published: 2022-06-30
Description: A vulnerability classified as problematic was found in Bitrix Site Manager 12.06.2015. Affected by this vulnerability is an unknown functionality of the component Contact Form. The manipulation of the argument text with the input <img src="http://1"; on onerror="$(’p').text(’Hacked’)" /> leads to basic cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-80, CWE-79
References: http://seclists.org/fulldisclosure/2017/Feb/3; https://vuldb.com/?id.96643; http://seclists.org/fulldisclosure/2017/Feb/3
CVE: CVE-2017-20123
Published: 2022-06-30
Description: A vulnerability was found in Viscosity 1.6.7. It has been classified as critical. This affects an unknown part of the component DLL Handler. The manipulation leads to untrusted search path. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.8 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-426, CWE-427
References: http://seclists.org/fulldisclosure/2017/Feb/1; https://github.com/kacperszurek/exploits/tree/master/Viscosity; https://vuldb.com/?id.96639
CVE: CVE-2017-20124
Published: 2022-06-30
Description: A vulnerability classified as critical has been found in Online Hotel Booking System Pro Plugin 1.0. Affected is an unknown function of the file /front/roomtype-details.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.96624; https://www.exploit-db.com/exploits/41182/; https://vuldb.com/?id.96624
CVE: CVE-2017-20125
Published: 2022-06-30
Description: A vulnerability classified as critical was found in Online Hotel Booking System Pro 1.2. Affected by this vulnerability is an unknown functionality of the file /roomtype-details.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.96625; https://www.exploit-db.com/exploits/41181/; https://vuldb.com/?id.96625
CVE: CVE-2022-26135
Published: 2022-06-30
Description: A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read server-side request forgery via a batch endpoint. This affects Atlassian Jira Server and Data Center from version 8.0.0 before version 8.13.22, from version 8.14.0 before 8.20.10, from version 8.21.0 before 8.22.4. This also affects Jira Management Server and Data Center versions from version 4.0.0 before 4.13.22, from version 4.14.0 before 4.20.10 and from version 4.21.0 before 4.22.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://confluence.atlassian.com/display/JIRA/Jira+Server+Security+Advisory+29nd+June+2022; https://jira.atlassian.com/browse/JRASERVER-73863; https://jira.atlassian.com/browse/JSDSERVER-11840
CVE: CVE-2021-40643
Published: 2022-06-30
Description: EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page. In the location of the "sendmail" application in the "cacti" configuration page (by default/usr/sbin/sendmail) it is possible to execute any command, which will be executed when we make a test of the configuration ("send test mail").
CVSS Score: 9.8 (CRITICAL)
References: https://eyesofnetwork.com; https://www.eyesofnetwork.com/en/news/vulnerabilite-cacti; https://eyesofnetwork.com
CVE: CVE-2021-40663
Published: 2022-06-30
Description: deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/janbialostok/deep-assign/issues/1; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.npmjs.com/package/deep.assign
CVE: CVE-2013-4146
Published: 2022-06-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-3414. Reason: This candidate is a duplicate of CVE-2012-3414. Notes: All CVE users should reference CVE-2012-3414 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2013-4170
Published: 2022-06-30
Description: In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, the `tagName` property of an `Ember.View` was inserted into such a string without being sanitized. This means that if an application assigns a view's `tagName` to user-supplied data, a specially-crafted payload could execute arbitrary JavaScript in the context of the current domain ("XSS"). This vulnerability only affects applications that assign or bind user-provided content to `tagName`.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://groups.google.com/g/ember-security/c/dokLVwwxAdM; https://rubysec.com/advisories/CVE-2013-4170/; https://security.snyk.io/vuln/SNYK-RUBY-EMBERSOURCE-20102
CVE: CVE-2021-41506
Published: 2022-06-30
Description: Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205, V4.02.R11.Nat.20170301, V4.02.R12.Nat.OnvifS.20170727 is affected by a backdoor in the macGuarder and dvrHelper binaries of DVR/NVR/IP camera firmware due to static root account credentials in the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/Snawoot/hisilicon-dvr-telnet; https://github.com/tothi/hs-dvr-telnet; https://habr.com/en/post/486856/
CVE: CVE-2022-1852
Published: 2022-06-30
Description: A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2089815; https://github.com/torvalds/linux/commit/fee060cd52d69c114b62d1a2948ea9648b5131f9; https://bugzilla.redhat.com/show_bug.cgi?id=2089815
CVE: CVE-2022-2078
Published: 2022-06-30
Description: A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-121, CWE-120
References: https://bugzilla.redhat.com/show_bug.cgi?id=2096178; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/nf_tables_api.c?id=fecf31ee395b0295f2d7260aa29946b7605f7c85; https://www.debian.org/security/2022/dsa-5161
CVE: CVE-2022-33043
Published: 2022-06-30
Description: A cross-site scripting (XSS) vulnerability in the batch add function of Urtracker Premium v4.0.1.1477 allows attackers to execute arbitrary web scripts or HTML via a crafted excel file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/chen-jerry-php/vim/blob/main/core_tmp.md; https://github.com/chen-jerry-php/vim/blob/main/core_tmp.md
CVE: CVE-2021-37770
Published: 2022-06-30
Description: Nucleus CMS v3.71 is affected by a file upload vulnerability. In this vulnerability, we can use upload to change the upload path to the path without the Htaccess file. Upload an Htaccess file and write it to AddType application / x-httpd-php.jpg. In this way, an attacker can upload a picture with shell, treat it as PHP, execute commands, so as to take down website resources.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/NucleusCMS/NucleusCMS/issues/96; https://shimo.im/docs/Ch9CphJt8XwTvQ3d; https://github.com/NucleusCMS/NucleusCMS/issues/96
CVE: CVE-2021-37778
Published: 2022-06-30
Description: There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/osqzss/gps-sdr-sim/issues/294; https://github.com/osqzss/gps-sdr-sim/issues/294
CVE: CVE-2013-4309
Published: 2022-06-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA
CVE: CVE-2021-37791
Published: 2022-06-30
Description: MyAdmin v1.0 is affected by an incorrect access control vulnerability in viewing personal center in /api/user/userData?userCode=admin.
CVSS Score: 4.9 (MEDIUM)
References: https://github.com/cdfan/my-admin/issues/3; https://github.com/cdfan/my-admin/issues/3
CVE: CVE-2022-1955
Published: 2022-06-30
Description: Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-287
References: https://fluidattacks.com/advisories/tempest/; https://github.com/oxen-io/session-android; https://github.com/oxen-io/session-android/pull/897
CVE: CVE-2022-2056
Published: 2022-06-30
Description: Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2056.json; https://gitlab.com/libtiff/libtiff/-/issues/415; https://gitlab.com/libtiff/libtiff/-/merge_requests/346
CVE: CVE-2022-2057
Published: 2022-06-30
Description: Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2057.json; https://gitlab.com/libtiff/libtiff/-/issues/427; https://gitlab.com/libtiff/libtiff/-/merge_requests/346
CVE: CVE-2022-2058
Published: 2022-06-30
Description: Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2058.json; https://gitlab.com/libtiff/libtiff/-/issues/428; https://gitlab.com/libtiff/libtiff/-/merge_requests/346
CVE: CVE-2021-38941
Published: 2022-06-30
Description: IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048.
CVSS Score: 8.1 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/211048; https://www.ibm.com/support/pages/node/6599639; https://exchange.xforce.ibmcloud.com/vulnerabilities/211048
CVE: CVE-2021-38954
Published: 2022-06-30
Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could disclose sensitive version information that could aid in future attacks against the system. IBM X-Force ID: 211414.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/211414; https://www.ibm.com/support/pages/node/6599607; https://exchange.xforce.ibmcloud.com/vulnerabilities/211414
CVE: CVE-2022-22472
Published: 2022-06-30
Description: IBM Spectrum Protect Plus Container Backup and Restore (10.1.5 through 10.1.10.2 for Kubernetes and 10.1.7 through 10.1.10.2 for Red Hat OpenShift) could allow a remote attacker to bypass IBM Spectrum Protect Plus role based access control restrictions, caused by improper disclosure of session information. By retrieving the logs of a container an attacker could exploit this vulnerability to bypass login security of the IBM Spectrum Protect Plus server and gain unauthorized access based on the permissions of the IBM Spectrum Protect Plus user to the vulnerable Spectrum Protect Plus server software. IBM X-Force ID: 225340.
CVSS Score: 8.8 (HIGH)
CWE: CWE-281
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/225340; https://www.ibm.com/support/pages/node/6596907; https://exchange.xforce.ibmcloud.com/vulnerabilities/225340
CVE: CVE-2022-22474
Published: 2022-06-30
Description: IBM Spectrum Protect 8.1.0.0 through 8.1.14.0 dsmcad, dsmc, and dsmcsvc processes incorrectly handle certain read operations on TCP/IP sockets. This can result in a denial of service for IBM Spectrum Protect client operations. IBM X-Force ID: 225348.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/225348; https://www.ibm.com/support/pages/node/6596741; https://exchange.xforce.ibmcloud.com/vulnerabilities/225348
CVE: CVE-2022-22478
Published: 2022-06-30
Description: IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225886.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/225886; https://www.ibm.com/support/pages/node/6596741; https://exchange.xforce.ibmcloud.com/vulnerabilities/225886
CVE: CVE-2022-22487
Published: 2022-06-30
Description: An IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimited attempts to login to the storage agent without locking the administrative ID. A remote attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to both the IBM Spectrum Protect storage agent and the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 with which it communicates. IBM X-Force ID: 226326.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/226326; https://www.ibm.com/support/pages/node/6596881; https://exchange.xforce.ibmcloud.com/vulnerabilities/226326
CVE: CVE-2022-22494
Published: 2022-06-30
Description: IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request. This information could then be used in future attacks. IBM X-Force ID: 226940.
CVSS Score: 5.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/226940; https://www.ibm.com/support/pages/node/6596883; https://exchange.xforce.ibmcloud.com/vulnerabilities/226940
CVE: CVE-2022-22496
Published: 2022-06-30
Description: While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be configured to use SESSIONSECURITY=TRANSITIONAL. While in this mode, it may be susceptible to an offline dictionary attack. IBM X-Force ID: 226942.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-307
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/226942; https://www.ibm.com/support/pages/node/6596881; https://exchange.xforce.ibmcloud.com/vulnerabilities/226942