CVE-2023-28956

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-28956
IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/pages/node/7005519 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:spectrum_protect_backup-archive_client:*:*:*:*:*:*:*:*
History

27 Sep 2024, 14:15

Type Values Removed Values Added
Summary (en) IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls. IBM X-Force ID: 251767. (en) IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls.
References
  • {'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/251767', 'tags': ['VDB Entry', 'Vendor Advisory'], 'source': 'psirt@us.ibm.com'}
CWE CWE-266

28 Jun 2023, 14:51

Type Values Removed Values Added
New CVE
Information

Published : 2023-06-22 02:15

Updated : 2024-09-27 14:15

NVD link : CVE-2023-28956

Mitre link : CVE-2023-28956

CVE.ORG link : CVE-2023-28956

JSON object : View

Products Affected

microsoft

  • windows

ibm

  • spectrum_protect_backup-archive_client
CWE
CWE-266

Incorrect Privilege Assignment

NVD-CWE-Other