CVE-2022-40608

IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory traversal attack. This results in the restore operation gaining access to files which the operator should not have access to. IBM X-Force ID: 235873.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/235873	VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6620209	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/235873	VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6620209	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:spectrum_protect_plus:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:21

Type	Values Removed	Values Added
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/235873 - VDB Entry, Vendor Advisory~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/235873 - VDB Entry, Vendor Advisory
References	~~() https://www.ibm.com/support/pages/node/6620209 - Vendor Advisory~~	() https://www.ibm.com/support/pages/node/6620209 - Vendor Advisory

Information

Published : 2022-09-19 18:15

Updated : 2024-11-21 07:21

NVD link : CVE-2022-40608

Mitre link : CVE-2022-40608

CVE.ORG link : CVE-2022-40608

JSON object : View

Products Affected

ibm

spectrum_protect_plus

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2022-40608", "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.2}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-09-19T18:15:10.257", "references": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/235873", "tags": ["VDB Entry", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://www.ibm.com/support/pages/node/6620209", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/235873", "tags": ["VDB Entry", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.ibm.com/support/pages/node/6620209", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory traversal attack. This results in the restore operation gaining access to files which the operator should not have access to. IBM X-Force ID: 235873."}, {"lang": "es", "value": "IBM Spectrum Protect Plus versiones 10.1.6 hasta 10.1.11, la operaci\u00f3n de restauraci\u00f3n de Microsoft File Systems puede descargar cualquier archivo en el equipo de destino al manipular la URL con un ataque de salto de directorio. Esto hace que la operaci\u00f3n de restauraci\u00f3n consiga acceso a archivos a los que el operador no deber\u00eda tener acceso. IBM X-Force ID: 235873"}], "lastModified": "2024-11-21T07:21:42.890", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:spectrum_protect_plus:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFBA9472-67BB-4641-BFF1-B6A73DF02EFE", "versionEndIncluding": "10.1.11", "versionStartIncluding": "10.1.6"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}