CVE-2019-4140: IBM Spectrum Protect

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336.

Affected products

• IBM Spectrum Protect: from 7.1.0.0, before 7.1.9.300 (fixed in 7.1.9.300); from 8.1.0.0, before 8.1.8.0 (fixed in 8.1.8.0)

Published 2019-07-02. Last modified 2026-06-17.