{"id":"CVE-2022-22394","aliases":["EUVD-2022-27540","GHSA-6hcw-9ghr-6pfv"],"status":"published","title":"The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security...","description":"The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the vulnerable server.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/C:H/UI:N/I:H/AV:N/PR:L/AC:H/A:H/S:U/E:U/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02211,"percentile":0.82728,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2022-03-21T16:20:14Z","modified":"2026-06-17T04:28:20Z","products":[{"vendor":"ibm","product":"spectrum protect server"},{"vendor":"ibm","product":"spectrum_protect"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6564745","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/222147","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22394"},{"url":"https://github.com/advisories/GHSA-6hcw-9ghr-6pfv"}],"sources":{"cve":[{"id":"CVE-2022-22394","description":"The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the vulnerable server.","status":"published","published":"2022-03-21T16:20:14.517Z","modified":"2024-09-16T17:24:06.828Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/C:H/UI:N/I:H/AV:N/PR:L/AC:H/A:H/S:U/E:U/RL:O/RC:C","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:34:26.293612Z"}],"euvd":[{"id":"EUVD-2022-27540","description":"The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the vulnerable server.","status":"published","published":"2022-03-21T16:20:14Z","modified":"2024-09-16T17:24:06Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/C:H/UI:N/I:H/AV:N/PR:L/AC:H/A:H/S:U/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-03T00:55:42.486621Z"}],"ghsa":[{"id":"GHSA-6hcw-9ghr-6pfv","title":"The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security...","description":"The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the vulnerable server.","status":"published","published":"2022-03-22T00:00:41Z","modified":"2023-01-27T05:00:58Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:41:47.408375Z"}],"nvd":[{"id":"CVE-2022-22394","description":"The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the vulnerable server.","status":"published","published":"2022-03-21T17:15:07.677Z","modified":"2026-06-17T04:28:20.75Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:07:14.24948Z"}]}}