CVE-2020-4955

CVSS 8 HIGHEPSS 0.6%

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 fev 2021Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system, caused by improper parameter validation. By creating an unspecified servlet request with specially crafted input parameters, an attacker could exploit this vulnerability to load a malicious .dll with elevated privileges. IBM X-Force ID: 192155.

CVSS:3.0/C:H/S:C/A:H/AC:H/PR:L/UI:N/AV:A/I:H/E:U/RL:O/RC:C

Produtos afetados

IBM · Spectrum Protect Operations Center

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/192155 https://www.ibm.com/support/pages/node/6404966