CVE-2020-5021
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4epss 0.2%
exploitation probability
0.2%top 86% of all CVEs
observed exploitation
nono source reports it
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 does not invalidate session after a password reset which could allow a local user to impersonate another user on the system. IBM X-Force ID: 193657.
CVSS:3.0/AC:H/C:L/PR:N/UI:N/A:N/AV:L/I:L/S:U/RC:C/RL:O/E:U
Affected products
IBM · Spectrum Protect Plus