8.0
Élevée
CVE-2020-4955 IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system,…
Description
IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system, caused by improper parameter validation. By creating an unspecified servlet request with specially crafted input parameters, an attacker could exploit this vulnerability to load a malicious .dll with elevated privileges. IBM X-Force ID: 192155.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Spectrum Protect Operations Center 8.1 | 8.1 → 8.1.10.100 | Pas de correctif indiqué |
| Spectrum Protect Operations Center 7.1 | 7.1 → 7.1.12 | Pas de correctif indiqué |
Autres CVE de Spectrum Protect Operations Center
Les 10 CVE de Spectrum Protect Operations Center →
CVE-2022-22494
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the…
3.7
Faible
CVE-2022-22484
IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information,…
5.1
Moyenne
CVE-2022-22348
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could…
4.0
Moyenne
CVE-2022-22346
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to cross-site request forgery which…
4.3
Moyenne