IBM Spectrum Protect Plus server-side request forgery vulnerability

IBM Spectrum Protect Plus is a data protection platform from IBM Corporation. The platform provides enterprises with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes.A security vulnerability exists in IBM Spectrum Protect Plus, which stems from a lack of filtering and validation of server-side request forgery on the software server side. An attacker could exploit the vulnerability to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.