CVE-2020-4591
First published: Thu Aug 27 2020(Updated: )
IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool. IBM X-Force ID: 184746.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Spectrum Protect Server | <=8.1.0.000-8.1.10.000 | |
| IBM Spectrum Protect Server | >=8.1.0.000<=8.1.10.000 | |
| IBM AIX | ||
| Linux Linux kernel | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability with ID CVE-2020-4591?
The IBM Spectrum Protect Server could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool.
Which version of IBM Spectrum Protect Server is affected by CVE-2020-4591?
IBM Spectrum Protect Server versions 8.1.0.000 through 8.1.10.000 are affected by CVE-2020-4591.
What is the severity of CVE-2020-4591?
The severity of CVE-2020-4591 is low, with a severity value of 3.3.
How can the second chunk of an object in an encrypted container pool be occasionally not encrypted?
The second chunk of an object in an encrypted container pool can be occasionally not encrypted due to a vulnerability in IBM Spectrum Protect Server versions 8.1.0.000 through 8.1.10.000.
Is IBM AIX or Linux Linux kernel affected by CVE-2020-4591?
No, IBM AIX and Linux Linux kernel are not affected by CVE-2020-4591.
- collector/nvd-index
- agent/references
- agent/softwarecombine
- agent/first-publish-date
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/remedy
- agent/weakness
- agent/last-modified-date
- agent/tags
- agent/description
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm spectrum protect server
- version/ibm spectrum protect server/8.1.0.000
- version/ibm spectrum protect server/8.1.10.000
- canonical/ibm aix
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- version/ibm spectrum protect server/8.1.0.000-8.1.10.000