Remote Data Injection Vulnerability in IBM Spectrum Protect Plus
CVE-2020-5023
7.5HIGH
Summary
IBM Spectrum Protect Plus versions 10.1.0 through 10.1.7 may be susceptible to a vulnerability that allows remote users to inject arbitrary data into the system. This flaw can lead to excessive resource consumption, potentially causing the service to crash and rendering it unavailable. Organizations utilizing affected versions should assess their systems and apply necessary mitigations to fortify their defenses.
Affected Version(s)
Spectrum Protect Plus 10.1.0
Spectrum Protect Plus 10.1.7
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved