VDB-156762 · CVE-2020-4469 · XFDB 181724

IBM Spectrum Protect Plus up to 10.1.5 Incomplete Fix CVE-2020-4211 command injection

A vulnerability classified as critical has been found in IBM Spectrum Protect Plus up to 10.1.5 (Backup Software). Affected is an unknown code of the component Incomplete Fix CVE-2020-4211. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10553826	10/24/2020	VulD...	cve_cna	IBM Corporation	nvd.nist.gov	10/24/2020	accepted	70
10553825	10/24/2020	VulD...	xforce	181724	cve.mitre.org	10/24/2020	accepted	70
10553824	10/24/2020	VulD...	confirm_url	https://www.ibm.com/support/pages/node/6221358	cve.mitre.org	10/24/2020	accepted	70
10173741	06/16/2020	VulD...	cwe	77 (privilege escalation)		06/16/2020	accepted	90
10173739	06/16/2020	VulD...	cve_nvd_summary	IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. This vulnerability is due to an incomplete fix for CVE-2020-4211. IBM X-Force ID: 181724.	mitre.org	06/16/2020	accepted	100
10173738	06/16/2020	VulD...	cve_assigned	1577664000	mitre.org	06/16/2020	accepted	100
10173732	06/16/2020	VulD...	cvss3_nvd_a	H	nist.gov	06/16/2020	accepted	100
10173731	06/16/2020	VulD...	cvss3_nvd_i	H	nist.gov	06/16/2020	accepted	100
10173730	06/16/2020	VulD...	cvss3_nvd_c	H	nist.gov	06/16/2020	accepted	100
10173729	06/16/2020	VulD...	cvss3_nvd_s	U	nist.gov	06/16/2020	accepted	100
10173728	06/16/2020	VulD...	cvss3_nvd_ui	N	nist.gov	06/16/2020	accepted	100
10173727	06/16/2020	VulD...	cvss3_nvd_pr	N	nist.gov	06/16/2020	accepted	100
10173726	06/16/2020	VulD...	cvss3_nvd_ac	H	nist.gov	06/16/2020	accepted	100
10173725	06/16/2020	VulD...	cvss3_nvd_av	N	nist.gov	06/16/2020	accepted	100
10173699	06/16/2020	VulD...	type	Backup Software		06/16/2020	accepted	100
10173749	06/16/2020	VulD...	cvss3_nvd_basescore	8.1	nist.gov	06/16/2020	accepted	90
10173748	06/16/2020	VulD...	cvss3_vuldb_rc	X		06/16/2020	accepted	90
10173747	06/16/2020	VulD...	cvss3_vuldb_rl	X		06/16/2020	accepted	90
10173746	06/16/2020	VulD...	cvss3_vuldb_e	X		06/16/2020	accepted	90
10173745	06/16/2020	VulD...	cvss2_vuldb_rc	ND		06/16/2020	accepted	90