Lucene search
HistoryJun 22, 2023 - 2:15 a.m.
CVE-2023-28956
ibm
spectrum protect
backup-archive
client
privilege escalation
access controls
x-force id 251767
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.1 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls. IBM X-Force ID: 251767.
Affected configurations
Node
microsoftwindowsMatch-
ibmspectrum_protect_backup-archive_clientRange8.1.0.0–8.1.17.2
Related
ibm
ibm
prion
prion
Improper access control
2023-06-22 02:15:00
cnvd
cnvd
cve
cve
CVE-2023-28956
2023-06-22 02:15:48
cvelist
cvelist
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.1 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2023-28956