CVE-2022-22487 Auth bypass in Spectrum Protect Server

Medium 5.9 Published 30 Jun 2022 Updated 16 Sep 2024

Remote attackers can brute force login attempts to gain unauthorized administrative access to the storage agent and server.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-22487?

CVE-2022-22487 is a medium-severity authentication bypass vulnerability in IBM Spectrum Protect Server, published on 30 Jun 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimited attempts to login to the storage agent without locking the administrative ID. A remote attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to both the IBM Spectrum Protect storage agent and the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 with which it communicates. IBM X-Force ID: 226326.

Weakness: CWE-307

Which versions are affected by CVE-2022-22487?

It affects 1 product.

Products include Ibm Spectrum Protect Server.

How do I fix CVE-2022-22487?

No fix has been published for CVE-2022-22487 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2022-22487 being exploited?

There is no known exploitation of CVE-2022-22487 in the wild and no public exploit code.

Sources

Also known as GHSA-556c-92hj-fwg6.