CVE-2019-4088: IBM Spectrum Protect Operations Center

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused by loading a specially crafted library loaded by the dsmqsan module. By setting up such a library, a local attacker could exploit this vulnerability to gain root privileges on the vulnerable system. IBM X-Force ID: 157511.

Affected products

• IBM Spectrum Protect Operations Center: from 7.1.0.000, up to and including 7.1.9.200; from 8.1.0.000, up to and including 8.1.7.000

Published 2019-07-02. Last modified 2026-06-17.