5.3
Medium
CVE-2020-4771 IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote…
Description
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitive information, caused by improper authentication of a websocket endpoint. By using known tools to subscribe to the websocket event stream, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 188993.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Protect Operations Center 8.1 | 8.1 → 8.1.10 | No fix stated |
| Spectrum Protect Operations Center 7.1 | 7.1 → 7.1.11 | No fix stated |
Other CVEs of Spectrum Protect Operations Center
The 10 CVEs of Spectrum Protect Operations Center →
CVE-2022-22494
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the…
3.7
Low
CVE-2022-22484
IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information,…
5.1
Medium
CVE-2022-22348
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could…
4.0
Medium
CVE-2022-22346
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to cross-site request forgery which…
4.3
Medium