CVE-2020-5022 - IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which can result in an attacker obtaining information they are not authorized to access

Back Back to CVE browser

MEDIUM

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which can result in an attacker obtaining information they are not authorized to access

Published Jan 8, 2021

5.3

MEDIUM

CVSS 3.1

EPSS 1.01%

Description

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which can result in an attacker obtaining information they are not authorized to access. IBM X-Force ID: 193658.

Affected products

Vendor IBM Product Spectrum Protect Plus Default
n/a
- Version
  10.1.0
  Status
  affected
  Constraints
  -
- Version
  10.1.6
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Spectrum Protect Plus

n/a

Version	Status	Constraints
10.1.0	affected	-
10.1.6	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-306

Missing Authentication

CWE-862

Missing Authorization

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26269
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/193658
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6398754
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26269		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/193658		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6398754		x_refsource_CONFIRMPatchVendor Advisory