PT-2023-25369 · Ibm · Ibm Spectrum Protect Client+1

CVE-2023-35897

·

Publicado

2023-10-06

·

Atualizado

2023-10-11

CVSS v3.1

8.4

Alta

VetorAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Client and IBM Storage Protect for Virtual Environments versions 8.1.0.0 through 8.1.19.0
Description The issue allows a local user to execute arbitrary code on the system using a specially crafted file, caused by a DLL hijacking flaw.
Recommendations For versions 8.1.0.0 through 8.1.19.0, consider applying a patch or fix to address the DLL hijacking flaw, as no specific workaround or mitigation is provided in the given information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-35897

Produtos afetados

Ibm Spectrum Protect Client
Ibm Storage Protect For Virtual Environments