Authentication Bypass in IBM Spectrum Protect Operations Center

CVE-2020-4954

Summary

IBM Spectrum Protect Operations Center versions 7.1 and 8.1 are vulnerable to an authentication bypass due to improper session validation. An attacker could exploit this flaw using a compromised IBM Spectrum Protect server to obtain a valid session. Once access is gained, the attacker could bypass authentication restrictions and utilize limited debug functions, including logging level modifications. This vulnerability underscores the importance of securing session management to prevent unauthorized access.

References