Pétur Eyþórsson

**Name of the Vulnerable Software and Affected Versions** IBM Storage Protect Client versions 8.1.0.0 through 8.2.1.0 IBM Storage Protect Snapshot For Windows versions 8.1.0.0 through 8.2.1.0 **Description** An authentication bypass exists in the FlashCopy Manager (FCM) authentication mechanism. The application uses a hardcoded static credential embedded in multiple authentication code paths and fails to properly validate authentication responses. This allows a remote, unauthenticated attacker to establish a trusted session, impersonate legitimate clients, and gain unauthorized access to protected services and system resources. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.