CVEvulnerability

CVE-2020-4494

7.5 HIGH Published 2020-06-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-06-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-287

Description

IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow an attacker to bypass authentication due to improper session validation which can result in access to unauthorized resources. IBM X-Force ID: 182019.

Affected configurations

• ibm spectrum protect client (>= 8.1.7.0 <= 8.1.9.1) • ibm spectrum protect client (>= 8.1.9.0 <= 8.1.9.1) • ibm spectrum protect for space management (>= 8.1.7.0 <= 8.1.9.1) • ibm spectrum protect for space management (>= 8.1.9.0 <= 8.1.9.1)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References