IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory traversal attack. This results in the restore operation gaining access to files which the operator should not have access to. IBM X-Force ID: 235873.

Related CVEs

CVE-2022-40608

Key Information

GHSA ID

GHSA-m8r8-8368-mvmm

Published

September 20, 2022 12:00 AM

Last Modified

September 22, 2022 12:00 AM

CVSS Score

7.5 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: July 16, 2025 6:27 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.