CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-40234

Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a certificate inside the generated .crt file when uploading a TLS certificate to IBM Spectrum Protect Plus. If this generated .crt file is shared, an attacker can obtain the private key information for the uploaded certificate. IBM X-Force ID: 235718.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 15.2%

CVSS Severity

CVSS v3 Score 5.9

References

Products affected by CVE-2022-40234

Ibm » Spectrum Protect Plus » Version: 10.1.0

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.0
Ibm » Spectrum Protect Plus » Version: 10.1.1

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.1
Ibm » Spectrum Protect Plus » Version: 10.1.1.142

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.1.142
Ibm » Spectrum Protect Plus » Version: 10.1.10

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.10
Ibm » Spectrum Protect Plus » Version: 10.1.10.2

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.10.2
Ibm » Spectrum Protect Plus » Version: 10.1.11

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.11
Ibm » Spectrum Protect Plus » Version: 10.1.2

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2
Ibm » Spectrum Protect Plus » Version: 10.1.2.209

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2.209
Ibm » Spectrum Protect Plus » Version: 10.1.2.219

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2.219
Ibm » Spectrum Protect Plus » Version: 10.1.2.247

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2.247
Ibm » Spectrum Protect Plus » Version: 10.1.2.271

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2.271
Ibm » Spectrum Protect Plus » Version: 10.1.2.303

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2.303
Ibm » Spectrum Protect Plus » Version: 10.1.2.350

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.2.350
Ibm » Spectrum Protect Plus » Version: 10.1.3

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.3
Ibm » Spectrum Protect Plus » Version: 10.1.3.236

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.3.236
Ibm » Spectrum Protect Plus » Version: 10.1.3.286

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.3.286
Ibm » Spectrum Protect Plus » Version: 10.1.4

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.4
Ibm » Spectrum Protect Plus » Version: 10.1.4.145

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.4.145
Ibm » Spectrum Protect Plus » Version: 10.1.4.179

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.4.179
Ibm » Spectrum Protect Plus » Version: 10.1.4.222

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.4.222
Ibm » Spectrum Protect Plus » Version: 10.1.4.254

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.4.254
Ibm » Spectrum Protect Plus » Version: 10.1.4.277

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.4.277
Ibm » Spectrum Protect Plus » Version: 10.1.5

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.5
Ibm » Spectrum Protect Plus » Version: 10.1.5.2130

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.5.2130
Ibm » Spectrum Protect Plus » Version: 10.1.5.2153

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.5.2153
Ibm » Spectrum Protect Plus » Version: 10.1.5.2181

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.5.2181
Ibm » Spectrum Protect Plus » Version: 10.1.5.2199

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.5.2199
Ibm » Spectrum Protect Plus » Version: 10.1.6

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.6
Ibm » Spectrum Protect Plus » Version: 10.1.7

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.7
Ibm » Spectrum Protect Plus » Version: 10.1.8

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.8
Ibm » Spectrum Protect Plus » Version: 10.1.8.1

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.8.1
Ibm » Spectrum Protect Plus » Version: 10.1.9.2

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.9.2
Ibm » Spectrum Protect Plus » Version: 10.1.9.3

cpe:2.3:a:ibm:spectrum_protect_plus:10.1.9.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-40234

Products

Pricing

Contact Us