Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-22485

Опубликовано: 17 июн. 2022
Источник: nvd
CVSS3: 5.9
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on the IBM Spectrum Protect Server. An attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to the IBM Spectrum Protect Server. IBM X-Force ID: 226325.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:ibm:spectrum_protect_operations_center:*:*:*:*:*:*:*:*
Версия от 8.1.0.000 (включая) до 8.1.14.000 (включая)

Одно из

cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 40%
0.00182
Низкий

5.9 Medium

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-307

Связанные уязвимости

CVSS3: 9.8
github
больше 3 лет назад

In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on the IBM Spectrum Protect Server. An attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to the IBM Spectrum Protect Server. IBM X-Force ID: 226325.

EPSS

Процентиль: 40%
0.00182
Низкий

5.9 Medium

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-307