CVE-2020-4214

Опубликовано: 31 мар. 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 6.4

EPSS Низкий

Описание

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to arbitrary delete a directory caused by improper validation of user-supplied input. IBM X-Force ID: 175026.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/175026
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6114130
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/175026
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6114130
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:spectrum_protect_plus:*:*:*:*:*:*:*:*

Версия от 10.1.0 (включая) до 10.1.5 (включая)

EPSS

Процентиль: 29%

0.00104

Низкий

7.5 High

CVSS3

7.5 High

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-2mfh-8q3p-3q36

github

больше 3 лет назад

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to arbitrary delete a directory caused by improper validation of user-supplied input. IBM X-Force ID: 175026.

EPSS

Процентиль: 29%

0.00104

Низкий

7.5 High

CVSS3

7.5 High

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-20