CVE-2022-40234

Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a certificate inside the generated .crt file when uploading a TLS certificate to IBM Spectrum Protect Plus. If this generated .crt file is shared, an attacker can obtain the private key information for the uploaded certificate. IBM X-Force ID: 235718.
Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:spectrum_protect_plus:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:21

Type Values Removed Values Added
New CVE

Information

Published : 2022-09-19 18:15

Updated : 2024-11-21 07:21


NVD link : CVE-2022-40234

Mitre link : CVE-2022-40234

CVE.ORG link : CVE-2022-40234


JSON object : View

Products Affected

ibm

  • spectrum_protect_plus
CWE
CWE-668

Exposure of Resource to Wrong Sphere