by Kastro
Paper/Archive/CVE-2022-22485

CVE-2022-22485

IBM Spectrum Protect Server — In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the…

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 66.6.666 × 2013.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on the IBM Spectrum Protect Server. An attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to the IBM Spectrum Protect Server. IBM X-Force ID: 226325.

Affected

ProductAffectedFixed inSource
Spectrum Protect Server8.1.0.000–CNA
Spectrum Protect Server8.1.14.000–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ibm (CNA)5.9CVSS:3.0/AC:H/S:U/UI:N/AV:N/A:N/I:N/C:H/PR:N/RC:C/RL:O/E:U

References

refibm.com/support/pages/node/6595655refexchange.xforce.ibmcloud.com/vulnerabilities/226325