VULNERABILITY INTELLIGENCE

CVE-2022-22485

CVSS score9.8 CRITICAL

EPSS probability1.14%

CISA KEVNot currently listed

Published2022-06-17

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In some cases, an unsuccessful attempt to log into IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14.000 does not cause the administrator's invalid sign-on count to be incremented on the IBM Spectrum Protect Server. An attacker could exploit this vulnerability using brute force techniques to gain unauthorized administrative access to the IBM Spectrum Protect Server. IBM X-Force ID: 226325.

Weakness classification

nvd@nist.gov: CWE-307

Primary references

psirt@us.ibm.com — VDB Entry, Vendor Advisory
psirt@us.ibm.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — VDB Entry, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory