7.5
High
CVE-2020-4494 IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum…
Description
IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow an attacker to bypass authentication due to improper session validation which can result in access to unauthorized resources. IBM X-Force ID: 182019.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Protect for Space Management (Linux) 8.1 | 8.1.7.0 → 8.1.9.1 | No fix stated |
| Spectrum Protect for Space Management (AIX) 8.1 | 8.1.9.0 → 8.1.9.1 | No fix stated |
| Spectrum Protect Client (AIX) 8.1 | 8.1.9.0 → 8.1.9.1 | No fix stated |
| Spectrum Protect Client (Linux and Windows) 8.1 | 8.1.7.0 → 8.1.9.1 | No fix stated |