CVE-2022-22396
HIGHIBM Spectrum Protect Plus <10.1.9.3 - Info Disclosure
Title source: llmDescription
Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases. Credentials could be the remote vSnap, offload targets, or VADP credentials depending on the operation performed. Credentials that are using API key or certificate are not printed. IBM X-Force ID: 222231.
Scores
CVSS v3
7.5
EPSS
0.0009
EPSS Percentile
24.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-522
Status
published
Affected Products (1)
ibm/spectrum_protect_plus
< 10.1.10
Timeline
Published
Jun 06, 2022
Tracked Since
Feb 18, 2026