Skip to content
Sign in
4.0 Medium

CVE-2020-5021 IBM Spectrum Protect Plus 10.1.0 through 10.1.6 does not invalidate session after a password reset which could allow a…

Description

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 does not invalidate session after a password reset which could allow a local user to impersonate another user on the system. IBM X-Force ID: 193657.

Affected products and versions

Product Affected versions Fixed in
Spectrum Protect Plus 10.1 10.1.0 → 10.1.6 No fix stated

Other CVEs of Spectrum Protect Plus

The 49 CVEs of Spectrum Protect Plus →
CVE-2020-4497 IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in… 6.8 Medium CVE-2022-40608 IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the… 5.9 Medium CVE-2022-40234 Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a… 5.9 Medium CVE-2022-22472 IBM Spectrum Protect Plus Container Backup and Restore (10.1.5 through 10.1.10.2 for Kubernetes and 10.1.7 through… 6.0 Medium
Track this CVE