Remote Data Injection Vulnerability in IBM Spectrum Protect Plus
CVE-2020-5023

7.5HIGH

Key Information:

Vendor: IBM
Status: Spectrum Protect Plus
Vendor: CVE Published:; 10 February 2021

Summary

IBM Spectrum Protect Plus versions 10.1.0 through 10.1.7 may be susceptible to a vulnerability that allows remote users to inject arbitrary data into the system. This flaw can lead to excessive resource consumption, potentially causing the service to crash and rendering it unavailable. Organizations utilizing affected versions should assess their systems and apply necessary mitigations to fortify their defenses.

Affected Version(s)

Spectrum Protect Plus 10.1.0

Spectrum Protect Plus 10.1.7

References

https://www.ibm.com/support/pages/node/6410888

x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/193659

vdb-entryx_refsource_XF

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Feb 10, 2021
Vulnerability Reserved
Dec 30, 2019