Lucene search
IBM31865EF723293A2349371BF2714FD31331970FD8BC69530649D080DD8C97A3D0HistoryAug 03, 2020 - 10:40 p.m.
Security Bulletin: OpenSSH vulnerability affects IBM Spectrum Protect Plus (CVE-2020-15778)
2020-08-0322:40:43
www.ibm.com
233
openssh
ibm spectrum protect plus
cve-2020-15778
remote attacker
improper input validation
arbitrary commands
cvss 9.8
linux
EPSS
0.006
Percentile
78.5%
Summary
A vulnerability in OpenSSH may affect IBM Spectrum Protect Plus.
Vulnerability Details
CVEID:CVE-2020-15778
**DESCRIPTION:**OpenSSH could allow a remote attacker to execute arbitrary commands on the system, caused by improper input validation in the remote function in scp.c. By using backtick characters in the destination argument, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
CVSS Base score: 9.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/185805 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Spectrum Protect Plus | 10.1.0-10.1.5 |
Remediation/Fixes
| Spectrum Protect Plus Release | First Fixing VRM Level | Platform | Link to Fix |
|---|---|---|---|
| 10.1 | 10.1.6 | Linux | <https://www.ibm.com/support/pages/node/5693313> |
Workarounds and Mitigations
None
Related
osv
osv
Moderate: openssh security update
2024-05-22 00:00:00
nessus
nessus
EulerOS Virtualization for ARM 64 3.0.6.0 : openssh (EulerOS-SA-2021-2018)
2021-06-30 00:00:00
IBM Spectrum Protect Plus OpenSSH Remote Command Injection
2021-06-30 00:00:00
EulerOS Virtualization for ARM 64 3.0.2.0 : openssh (EulerOS-SA-2021-2097)
2021-07-02 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-15778 affecting package openssh 8.0p1-13
2020-11-30 19:30:42
ibm
ibm
cvelist
cvelist
CVE-2020-15778
2020-07-24 00:00:00
CVE-2023-38336
2023-07-14 00:00:00
almalinux
almalinux
Moderate: openssh security update
2024-05-22 00:00:00
nvd
nvd
CVE-2020-15778
2020-07-24 14:15:12
CVE-2023-38336
2023-07-14 22:15:09
cve
cve
CVE-2020-15778
2020-07-24 14:15:12
CVE-2023-38336
2023-07-14 22:15:09
openvas
openvas
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2021-2097)
2021-07-07 00:00:00
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2021-2039)
2021-07-01 00:00:00
OpenBSD OpenSSH <= 8.6 Command Injection Vulnerability
2020-08-03 00:00:00
debiancve
debiancve
CVE-2020-15778
2020-07-24 14:15:12
CVE-2023-38336
2023-07-14 22:15:09
alpinelinux
alpinelinux
CVE-2020-15778
2020-07-24 14:15:00
prion
prion
Command injection
2020-07-24 14:15:00
Command injection
2023-07-14 22:15:00
githubexploit
githubexploit
Exploit for OS Command Injection in Openbsd Openssh
2020-07-18 05:15:05
Exploit for OS Command Injection in Openbsd Openssh
2021-07-15 01:04:24
redhat
redhat
f5
f5
K04305530: SCP vulnerability CVE-2020-15778
2020-09-23 00:00:00
gentoo
gentoo
OpenSSH: Multiple Vulnerabilities
2022-12-28 00:00:00
redhatcve
redhatcve
CVE-2020-15778
2020-07-24 18:37:46
ubuntucve
ubuntucve
CVE-2020-15778
2020-07-24 00:00:00
CVE-2023-38336
2023-07-14 00:00:00
vulnrichment
vulnrichment
CVE-2020-15778
2020-07-24 00:00:00
oraclelinux
oraclelinux
openssh security update
2024-05-23 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
avleonov
avleonov
EPSS
0.006
Percentile
78.5%
Related for 31865EF723293A2349371BF2714FD31331970FD8BC69530649D080DD8C97A3D0