CoreCVE
Back

MEDIUM

IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file

Published Feb 15, 2021

Description

IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cache value and dumping that cached value to a file multiple times, a remote attacker could exploit this vulnerability to cause the consumption of all memory resources. IBM X-Force ID: 192156.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner ibm
Published Feb 15, 2021
Updated Sep 17, 2024
Reserved Dec 30, 2019
Link CVE-2020-4956

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2020-4956

Red Hat

No data

ENISA EUVD

Assigner ibm
Published Feb 15, 2021
Updated Sep 17, 2024
Link EUVD-2020-26203

GitHub

No data