Description
IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, could allow an attacker with intimate knowledge of the system to obtain highly sensitive information.
References (2)
Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/3177915
VDB Entry, Vendor Advisory vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/172013
Scores
CVSS v3
5.3
EPSS
0.0046
EPSS Percentile
36.8%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
Status
published
Products (1)
ibm/spectrum_protect_plus
10.1.0 - 10.1.5
Published
Feb 24, 2020
Tracked Since
Feb 18, 2026