Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-4469

Опубликовано: 15 июн. 2020
Источник: nvd
CVSS3: 8.1
CVSS3: 9.8
CVSS2: 10
EPSS Средний

Описание

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. This vulnerability is due to an incomplete fix for CVE-2020-4211. IBM X-Force ID: 181724.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ibm:spectrum_protect_plus:*:*:*:*:*:*:*:*
Версия от 10.1.0 (включая) до 10.1.5 (включая)

EPSS

Процентиль: 96%
0.24336
Средний

8.1 High

CVSS3

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

github логотип

GHSA-5pwc-mh67-m6xf

github
больше 3 лет назад

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. This vulnerability is due to an incomplete fix for CVE-2020-4211. IBM X-Force ID: 181724.

EPSS

Процентиль: 96%
0.24336
Средний

8.1 High

CVSS3

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78