CVE-2020-4854: Critical severity ibm storage protect plus vulnerability
IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 190454.
Other sources
IBM Spectrum Protect Plus contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4854?
The severity of CVE-2020-4854 is critical with a CVSS score of 9.8.
What is the impact of CVE-2020-4854?
CVE-2020-4854 allows an attacker to gain unauthorized access, perform unauthorized actions, or decrypt internal data.
How does CVE-2020-4854 affect IBM Spectrum Protect Plus?
CVE-2020-4854 affects IBM Spectrum Protect Plus versions 10.1.0 through 10.1.6 by containing hard-coded credentials.
Are Linux systems vulnerable to CVE-2020-4854?
Linux systems are not vulnerable to CVE-2020-4854.
How can I fix CVE-2020-4854?
To fix CVE-2020-4854, upgrade IBM Spectrum Protect Plus to a version beyond 10.1.6.