Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r95c-3gx6-f23p

Опубликовано: 14 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 214616.

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 214616.

EPSS

Процентиль: 32%
0.00121
Низкий

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 8.1
nvd
около 4 лет назад

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 214616.

EPSS

Процентиль: 32%
0.00121
Низкий

Дефекты

CWE-918