Lucene search

IbmCVE-2020-4693

HistorySep 02, 2020 - 7:15 p.m.

CVE-2020-4693

2020-09-0219:15:18

CWE-20

ibm

web.nvd.nist.gov

ibm

spectrum protect

operations center

cve-2020-4693

nvd

security

data validation

code execution

ibm x-force id 186782

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.003

Percentile

70.0%

JSON

IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782.

Affected configurations

Nvd

Vulners

Node

ibmaixMatch-

linuxlinux_kernelMatch-

microsoftwindowsMatch-

AND

ibmspectrum_protect_operations_centerRange7.1.0.000–7.1.10.000

ibmspectrum_protect_operations_centerRange8.1.0.000–8.1.9.000

VendorProductVersionCPE
ibmaix-cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
ibmspectrum_protect_operations_center*cpe:2.3:a:ibm:spectrum_protect_operations_center:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	aix	-	cpe:2.3:o:ibm:aix:-:::::::*
linux	linux_kernel	-	cpe:2.3:o:linux:linux_kernel:-:::::::*
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*
ibm	spectrum_protect_operations_center	*	cpe:2.3:a:ibm:spectrum_protect_operations_center::::::::

CNA Affected

[
  {
    "product": "Spectrum Protect Operations Center",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.1.0.000"
      },
      {
        "status": "affected",
        "version": "8.1.0.000"
      },
      {
        "status": "affected",
        "version": "7.1.10"
      },
      {
        "status": "affected",
        "version": "8.1.9"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/186782

www.ibm.com/support/pages/node/6325341

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.003

Percentile

70.0%

JSON

Related for CVE-2020-4693