CVE-2025-3319
IBM Spectrum Protect Server authentication bypass
- State
- Published
- Severity
- 8.1 High
- Published
- Jun 20, 2025
- Updated
- Aug 24, 2025
- Reserved
- Apr 5, 2025
Description
IBM Spectrum Protect Server 8.1 through 8.1.26 could allow attacker to bypass authentication due to improper session authentication which can result in access to unauthorized resources.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.1 High | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | ibm |
Weaknesses
- CWE-306 Missing Authentication for Critical Function
Affected Products
| Product | Versions |
|---|---|
Spectrum Protect ServerIBM |
|
References
- https://www.ibm.com/support/pages/node/7236999vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.