CVE-2020-4494

IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow an attacker to bypass authentication due to improper session validation which can result in access to unauthorized resources. IBM X-Force ID: 182019.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@us.ibm.com

Published

2020-06-15

Last modified

2024-09-17

Weaknesses

CWE-287

Affected products

• Spectrum Protect Client (Ibm)
• Spectrum Protect Client Aix (Ibm)
• Spectrum Protect Client Linux And Windows (Ibm)
• Spectrum Protect For Space Management (Ibm)
• Spectrum Protect For Space Management Aix (Ibm)
• Spectrum Protect For Space Management Linux (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/182019
• https://www.ibm.com/support/pages/node/6221448