8
CVE-2020-4955
- EPSS 1.28%
- Published 15.02.2021 15:15:13
- Last modified 21.11.2024 05:33:28
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system, caused by improper parameter validation. By creating an unspecified servlet request with specially crafted input parameters, an attacker could exploit this vulnerability to load a malicious .dll with elevated privileges. IBM X-Force ID: 192155.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Spectrum Protect Operations Center Version >= 7.1.0.000 < 7.1.13.000
Ibm ≫ Spectrum Protect Operations Center Version >= 8.1.0.000 < 8.1.10.200
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.28% | 0.777 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 8 | 2.1 | 5.9 |
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 5.2 | 5.1 | 6.4 |
AV:A/AC:L/Au:S/C:P/I:P/A:P
|
| psirt@us.ibm.com | 8 | 1.3 | 6 |
CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
|
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.