CVE-2020-4955

CVSS 8 HIGHEPSS 0.6%

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

15 Feb 2021Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system, caused by improper parameter validation. By creating an unspecified servlet request with specially crafted input parameters, an attacker could exploit this vulnerability to load a malicious .dll with elevated privileges. IBM X-Force ID: 192155.

CVSS:3.0/C:H/S:C/A:H/AC:H/PR:L/UI:N/AV:A/I:H/E:U/RL:O/RC:C

Affected products

IBM · Spectrum Protect Operations Center

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/192155 https://www.ibm.com/support/pages/node/6404966