Vulnerability Details CVE-2018-2025
IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.6%
CVSS Severity
CVSS v3 Score 5.1
CVSS v2 Score 3.6
References
Products affected by CVE-2018-2025
-
cpe:2.3:a:ibm:spectrum_protect:7.1.0.0
-
cpe:2.3:a:ibm:spectrum_protect:7.1.0.000
-
cpe:2.3:a:ibm:spectrum_protect:7.1.8.2
-
cpe:2.3:a:ibm:spectrum_protect:7.1.8.3
-
cpe:2.3:a:ibm:spectrum_protect:7.1.8.4
-
cpe:2.3:a:ibm:spectrum_protect:7.1.8.5
-
cpe:2.3:a:ibm:spectrum_protect:8.1.0.0
-
cpe:2.3:a:ibm:spectrum_protect:8.1.0.000
-
cpe:2.3:a:ibm:spectrum_protect:8.1.1
-
cpe:2.3:a:ibm:spectrum_protect:8.1.1.100
-
cpe:2.3:a:ibm:spectrum_protect:8.1.1.200
-
cpe:2.3:a:ibm:spectrum_protect:8.1.1.300
-
cpe:2.3:a:ibm:spectrum_protect:8.1.1.400
-
cpe:2.3:a:ibm:spectrum_protect:8.1.2
-
cpe:2.3:a:ibm:spectrum_protect:8.1.3
-
cpe:2.3:a:ibm:spectrum_protect:8.1.4
-
cpe:2.3:a:ibm:spectrum_protect:8.1.4.1
-
cpe:2.3:a:ibm:spectrum_protect:8.1.4.2
-
cpe:2.3:a:ibm:spectrum_protect:8.1.5
-
cpe:2.3:a:ibm:spectrum_protect:8.1.5.100
-
cpe:2.3:a:ibm:spectrum_protect:8.1.6
-
cpe:2.3:a:ibm:spectrum_protect:8.1.6.0
-
cpe:2.3:a:ibm:spectrum_protect:8.1.6.1
-
cpe:2.3:a:ibm:spectrum_protect:8.1.6.100
-
cpe:2.3:a:ibm:spectrum_protect:8.1.6.200
-
cpe:2.3:a:ibm:spectrum_protect:8.1.7
-
cpe:2.3:a:ibm:spectrum_protect:8.1.7.0
-
cpe:2.3:a:ibm:spectrum_protect:8.1.7.1
-
cpe:2.3:a:ibm:spectrum_protect:8.1.8.0
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.0.0
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.1
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.1.0
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.2
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.2.0
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.3
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.3.0
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.4
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.4.0
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.6
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.6.0
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.8
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.8.0
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.8.2
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.8.4
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:7.1.8.5
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:8.1.0.0
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:8.1.2
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:8.1.2.0
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:8.1.4
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:8.1.4.0
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:8.1.4.1
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:8.1.6
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:8.1.6.0
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:8.1.6.1
-
cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:8.1.8.0