CVE-2023-33832
19.07.2023, 01:15
IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due to improper time-of-check to time-of-use functionality. IBM X-Force ID: 256012.
| Vendor | Product | Version |
|---|---|---|
| ibm | spectrum_protect_client | 8.1.0.0 ≤ 𝑥 ≤ 8.1.17.0 |
| ibm | spectrum_protect_for_space_management | 8.1.0.0 ≤ 𝑥 ≤ 8.1.17.0 |
| ibm | spectrum_protect_for_virtual_environments | 8.1.0.0 ≤ 𝑥 ≤ 8.1.17.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-20 - Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- CWE-367 - Time-of-check Time-of-use (TOCTOU) Race ConditionThe software checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the software to perform invalid actions when the resource is in an unexpected state.