CVE-2022-22496

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Server versions 8.1.0.000 through 8.1.14

Description The issue arises when a user account for the IBM Spectrum Protect Server is being established and configured to use SESSIONSECURITY=TRANSITIONAL. In this mode, it may be susceptible to an offline dictionary attack.

Recommendations For versions 8.1.0.000 through 8.1.14, consider disabling the use of SESSIONSECURITY=TRANSITIONAL to prevent potential offline dictionary attacks until a patch is available. Restrict access to user account establishment to minimize the risk of exploitation.