CVE-2023-33832

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published Jul 19, 2023
Updated: Jul 27, 2023
CWE ID 367
CWE ID 20

Summary

CVE-2023-33832 is a denial-of-service vulnerability affecting IBM Spectrum Protect versions 8.1.0.0 to 8.1.17.0. A local user can exploit improper time-of-check to time-of-use functionality, leading to a disruption of services. IBM's X-Force has assigned ID 256012 to this issue. This vulnerability may cause significant downtime and negatively impact data backup processes if not addressed promptly. IBM urges users to upgrade to a patched version as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • IBM Spectrum Protect Client
  • IBM Spectrum Protect For Virtual Environments

Affected Vendors

  • IBM Corporation

Advisories, Assessments, and Mitigations