Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-4956

Опубликовано: 15 фев. 2021
Источник: nvd
CVSS3: 4.8
CVSS3: 4.8
CVSS2: 2.3
EPSS Низкий

Описание

IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cache value and dumping that cached value to a file multiple times, a remote attacker could exploit this vulnerability to cause the consumption of all memory resources. IBM X-Force ID: 192156.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:spectrum_protect_operations_center:*:*:*:*:*:*:*:*
Версия от 7.1.0.000 (включая) до 7.1.13.000 (исключая)
cpe:2.3:a:ibm:spectrum_protect_operations_center:*:*:*:*:*:*:*:*
Версия от 8.1.0.000 (включая) до 8.1.10.200 (исключая)

EPSS

Процентиль: 45%
0.00225
Низкий

4.8 Medium

CVSS3

4.8 Medium

CVSS3

2.3 Low

CVSS2

Дефекты

CWE-400

Связанные уязвимости

github
больше 3 лет назад

IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cache value and dumping that cached value to a file multiple times, a remote attacker could exploit this vulnerability to cause the consumption of all memory resources. IBM X-Force ID: 192156.

EPSS

Процентиль: 45%
0.00225
Низкий

4.8 Medium

CVSS3

4.8 Medium

CVSS3

2.3 Low

CVSS2

Дефекты

CWE-400