Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a certificate inside the generated .crt file when uploading a TLS certificate to IBM Spectrum Protect Plus. If this generated .crt file is shared, an attacker can obtain the private key information for the uploaded certificate. IBM X-Force ID: 235718.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Spectrum Protect Plus 安全漏洞
Vulnerability Description
IBM Spectrum Protect Plus是美国国际商业机器（IBM）公司的一套数据保护平台。该平台为企业提供单一控制和管理点，并支持对所有规模的虚拟、物理和云环境进行备份和恢复。 IBM Spectrum Protect Plus 10.1.12之前版本存在安全漏洞，该漏洞源于在将TLS证书上传到IBM Spectrum-Protect Plus时，生成的.crt文件中包含证书的私钥信息。
CVSS Information
N/A
Vulnerability Type
N/A