Code injection

2019-11-2517:15:00

PRIOn knowledge base

www.prio-n.com

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551.

CPENameOperatorVersion
spectrum_protectge7.1.0.0
spectrum_protectle7.1.8.5
spectrum_protectge8.1.0.0
spectrum_protectle8.1.8.0
spectrum_protect_for_virtual_environmentsge8.1.0.0
spectrum_protect_for_virtual_environmentsle8.1.8.0
spectrum_protect_for_virtual_environmentsge7.1.0.0
spectrum_protect_for_virtual_environmentsle7.1.8.5
spectrum_protect_for_virtual_environmentsge7.1.0.0
spectrum_protect_for_virtual_environmentsle7.1.8.5

Name	Operator	Version
spectrum_protect	ge	7.1.0.0
spectrum_protect	le	7.1.8.5
spectrum_protect	ge	8.1.0.0
spectrum_protect	le	8.1.8.0
spectrum_protect_for_virtual_environments	ge	8.1.0.0
spectrum_protect_for_virtual_environments	le	8.1.8.0
spectrum_protect_for_virtual_environments	ge	7.1.0.0
spectrum_protect_for_virtual_environments	le	7.1.8.5
spectrum_protect_for_virtual_environments	ge	7.1.0.0
spectrum_protect_for_virtual_environments	le	7.1.8.5