CVE-2020-4241: high-severity vulnerability in IBM Spectrum Protect Plus
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
IBM Spectrum Scale and Spectrum Protect Plus versions 10.1.0 through 10.1.5 have a flaw that lets authenticated attackers run arbitrary commands on the system by sending a specially crafted request. This is dangerous because it gives attackers full control over the affected system.
Remote authenticated attacker can execute arbitrary commands via specially crafted request to vulnerable versions of IBM Spectrum Scale and Spectrum Protect Plus (10.1.0–10.1.5). Requires valid credentials but does not require elevated privileges. Impact is code execution with system-level access.
In the same product, most dangerous first.