CVE-2019-4383: When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a r...

Security readout for executives and security teams

IBM Spectrum Protect Plus deployments protecting Oracle or MongoDB databases may let a highly privileged local user gain additional privileges during redirected restore operations. This affects versions 10.1.0, 10.1.2, and 10.1.3. The issue is high severity because confidentiality and integrity can be heavily impacted, but exploitation requires existing high privileges and local access. Exposure is likely limited to organizations running IBM Spectrum Protect Plus 10.1.0, 10.1.2, or 10.1.3 for Oracle or MongoDB protection workflows, especially where redirected restores are permitted or delegated to administrators or operators. Treat this as a high-priority hardening and patch-validation item for backup environments, not an internet-wide emergency. The business concern is privileged misuse of recovery infrastructure, which can undermine protected database confidentiality and integrity. Mitigation focus: Inventory IBM Spectrum Protect Plus versions and identify 10.1.0, 10.1.2, and 10.1.3 deployments.; Review IBM’s advisory for official remediation applicable to the installed release.; Restrict redirected restore permissions to trusted administrators only..

Prepared

May 23, 2026, 17:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.