CVE-2020-4591: Low severity ibm spectrum protect vulnerability
IBM Spectrum Protect Server 8.1.0.000 through 8.1.10.000 could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool. IBM X-Force ID: 184746.
Other sources
The IBM Spectrum Protect Server could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability with ID CVE-2020-4591?
The IBM Spectrum Protect Server could disclose sensitive information in nondefault settings due to occasionally not encrypting the second chunk of an object in an encrypted container pool.
Which version of IBM Spectrum Protect Server is affected by CVE-2020-4591?
IBM Spectrum Protect Server versions 8.1.0.000 through 8.1.10.000 are affected by CVE-2020-4591.
What is the severity of CVE-2020-4591?
The severity of CVE-2020-4591 is low, with a severity value of 3.3.
How can the second chunk of an object in an encrypted container pool be occasionally not encrypted?
The second chunk of an object in an encrypted container pool can be occasionally not encrypted due to a vulnerability in IBM Spectrum Protect Server versions 8.1.0.000 through 8.1.10.000.
Is IBM AIX or Linux Linux kernel affected by CVE-2020-4591?
No, IBM AIX and Linux Linux kernel are not affected by CVE-2020-4591.