Lucene search
IBM5F19AEA3B267F33130DDA4FCE830D33F4D8434B6D99C6AC445D0B9D6EA9C6C47HistoryAug 04, 2020 - 7:39 p.m.
Security Bulletin: Information Disclosure in IBM Spectrum Protect Plus (CVE-2020-4565)
2020-08-0419:39:44
www.ibm.com
13
EPSS
0.001
Percentile
43.8%
Summary
IBM Spectrum Protect Plus uses insecure communication between the application and server which could allow an attacker to obtain sensitive information.
Vulnerability Details
CVEID:CVE-2020-4565
**DESCRIPTION:**IBM Spectrum Protect Plus could allow an attacker to obtain sensitive information due to insecure communications being used between the application and server.
CVSS Base score: 5.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/183935 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Spectrum Protect Plus | 10.1.0-10.1.5 |
Remediation/Fixes
| Spectrum Protect Plus Release | First Fixing VRM Level | Platform | Link to Fix |
|---|---|---|---|
| 10.1 | 10.1.6 | Linux | <https://www.ibm.com/support/pages/node/5693313> |
Workarounds and Mitigations
None
Related
cvelist
cvelist
CVE-2020-4565
2020-06-26 13:45:31
prion
prion
Information disclosure
2020-06-26 14:15:00
cve
cve
CVE-2020-4565
2020-06-26 14:15:10
nvd
nvd
CVE-2020-4565
2020-06-26 14:15:10
EPSS
0.001
Percentile
43.8%
Related for 5F19AEA3B267F33130DDA4FCE830D33F4D8434B6D99C6AC445D0B9D6EA9C6C47