CVE-2020-4955

8HIGH

Key Information:

Vendor
IBM
Status
Spectrum Protect Operations Center
Vendor
CVE Published:
15 February 2021

Summary

IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system, caused by improper parameter validation. By creating an unspecified servlet request with specially crafted input parameters, an attacker could exploit this vulnerability to load a malicious .dll with elevated privileges. IBM X-Force ID: 192155.

Affected Version(s)

Spectrum Protect Operations Center 8.1

Spectrum Protect Operations Center 7.1

Spectrum Protect Operations Center 8.1.10.100

References

https://www.ibm.com/support/pages/node/6404966
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/192155
vdb-entryx_refsource_XF

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.