CVE-2020-4206: Input Validation

Q: What is the severity of CVE-2020-4206?

CVE-2020-4206 is considered critical due to the potential for remote command execution as a root user.

Q: How do I fix CVE-2020-4206?

To fix CVE-2020-4206, upgrade IBM Spectrum Protect Plus to version 10.1.6 or later.

Q: What systems are affected by CVE-2020-4206?

CVE-2020-4206 affects IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5.

Q: What type of vulnerability is CVE-2020-4206?

CVE-2020-4206 is a remote command execution vulnerability caused by improper validation of user-supplied input.

Q: Can CVE-2020-4206 be exploited remotely?

Yes, CVE-2020-4206 can be exploited remotely by an attacker to execute arbitrary commands.

Published Mar 30, 2020

Updated

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary commands on the system in the context of root user, caused by improper validation of user-supplied input. IBM X-Force ID: 174966.

Other sources

IBM Spectrum Protect Plus could allow a remote attacker to execute arbitrary commands on the system in the context of root user, caused by improper validation of user-supplied input.

Affected Software

2 affected components

IBM Spectrum Protect Plus<=10.1.0-10.1.5

IBM Spectrum Protect Plus>=10.1.0<=10.1.5

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6114130

Event History

Mar 30, 2020

CVE Published

via IBM·12:00 AM

Mar 31, 2020

CVE Published

via MITRE·02:31 PM

Data Sourced

via MITRE·02:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Sep 15, 58461

Event

09:05 AM

Parent advisories

This vulnerability appears in the following advisories.

IBM-6114130

Frequently Asked Questions

What is the severity of CVE-2020-4206?

CVE-2020-4206 is considered critical due to the potential for remote command execution as a root user.

How do I fix CVE-2020-4206?