Security Bulletin: IBM Spectrum Protect 8.1.14.000 Server is vulnerable to bypass of security restrictions (CVE-2022-22394)

Summary

IBM Spectrum Protect 8.1.14.000 Server could allow a remote attacker to bypass security restrictions due to improper enforcement of access controls.

Vulnerability Details

CVEID:CVE-2022-22394
**DESCRIPTION:**The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the vulnerable server.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/222147 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

Affected Products and Versions

Remediation/Fixes

IBM Spectrum Protect Server Affected Versions |Fixing
Level|Platform|Link to Fix and Instructions
—|—|—|—
8.1.14.000 | 8.1.14.100 | AIX
Linux
Windows | <http://www.ibm.com/support/pages/node/6562367&gt;

Workarounds and Mitigations

None