← back
CVE-2020-4591

CVE-2020-4591

CVSS 2.9 LOWEPSS 0.2%
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 2.9EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
28 Aug 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool. IBM X-Force ID: 184746.
CVSS:3.0/A:N/AC:H/C:L/S:U/AV:L/I:N/PR:N/UI:N/E:U/RC:C/RL:O
Affected products
IBM · Spectrum Protect Server
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/184746https://www.ibm.com/support/pages/node/6323765