PT-2022-15474
CVE-2022-22496
·
تاريخ النشر
2022-06-30
·
تاريخ التحديث
2022-07-08
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Spectrum Protect Server versions 8.1.0.000 through 8.1.14
Description
The issue arises when a user account for the IBM Spectrum Protect Server is being established and configured to use SESSIONSECURITY=TRANSITIONAL. In this mode, it may be susceptible to an offline dictionary attack.
Recommendations
For versions 8.1.0.000 through 8.1.14, consider disabling the use of SESSIONSECURITY=TRANSITIONAL to prevent potential offline dictionary attacks until a patch is available. Restrict access to user account establishment to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾