5
CVSSv2

CVE-2020-4494

Published: 15/06/2020 Updated: 21/07/2021
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

IBM Spectrum Protect Client 8.1.7.0 up to and including 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 up to and including 8.1.9.1 (Linux), 8.1.9.0 up to and including 8.1.9.1 (AIX) web user interfaces could allow an malicious user to bypass authentication due to improper session validation which can result in access to unauthorized resources. IBM X-Force ID: 182019.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm spectrum_protect_client

ibm spectrum_protect_for_space_management