CVE-2020-4494high

CVE-2020-4494: high-severity vulnerability in IBM Spectrum Protect Client (AIX)

Published · Updated

Follow this CVE+ Monitor Spectrum Protect for Space Management+ Monitor Spectrum Protect Client

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 2.3%
IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow an attacker to bypass authentication due to improper session validation which can result in access to unauthorized resources. IBM X-Force ID: 182019.
CVSS:3.0/I:N/A:N/S:U/UI:N/C:H/AC:L/PR:N/AV:N/RL:O/RC:C/E:U
Affected products
IBM · Spectrum Protect Client (AIX)IBM · Spectrum Protect Client (Linux and Windows)IBM · Spectrum Protect for Space Management (AIX)IBM · Spectrum Protect for Space Management (Linux)
Related CVEs — IBM Spectrum Protect Client (AIX)

In the same product, most dangerous first.

CVE-2020-4406MEDIUMCVE-2020-4406EPSS 0.8%