7.5

CVE-2020-4494

IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow an attacker to bypass authentication due to improper session validation which can result in access to unauthorized resources. IBM X-Force ID: 182019.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Spectrum Protect Client Version >= 8.1.7.0 <= 8.1.9.1
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
Ibm ≫ Spectrum Protect Client Version >= 8.1.9.0 <= 8.1.9.1
   Ibm ≫ Aix Version -
Ibm ≫ Spectrum Protect For Space Management Version >= 8.1.7.0 <= 8.1.9.1
   Linux ≫ Linux Kernel Version -
Ibm ≫ Spectrum Protect For Space Management Version >= 8.1.9.0 <= 8.1.9.1
   Ibm ≫ Aix Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.23% 0.804
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
IBM 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://www.ibm.com/support/pages/node/6221448
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/182019
Vendor Advisory
VDB Entry