Vulnerability Description
The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the vulnerable server.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Spectrum Protect | 8.1.14.100 |
| Ibm | Aix | - |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/222147VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/6564745PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/222147VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/6564745PatchVendor Advisory
FAQ
What is CVE-2022-22394?
CVE-2022-22394 is a vulnerability with a CVSS score of 8.8 (HIGH). The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit th...
How severe is CVE-2022-22394?
CVE-2022-22394 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-22394?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Spectrum Protect, Ibm Aix, Linux Linux Kernel, Microsoft Windows.