by Kastro
Paper/Archive/CVE-2025-3319

CVE-2025-3319

IBM Spectrum Protect Server — IBM Spectrum Protect Server authentication bypass

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 31.1.311 × 206.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Spectrum Protect Server 8.1 through 8.1.26 could allow attacker to bypass authentication due to improper session authentication which can result in access to unauthorized resources.

Affected

ProductAffectedFixed inSource
Spectrum Protect Server8.1 – 8.1.26–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ibm (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

patchibm.com/support/pages/node/7236999