CVE-2020-4954: Medium severity ibm spectrum protect operations center vulnerability
IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass authentication restrictions, caused by improper session validation . By using the configuration panel to obtain a valid session using an attacker controlled IBM Spectrum Protect server, an attacker could exploit this vulnerability to bypass authentication and gain access to a limited number of debug functions, such as logging levels. IBM X-Force ID: 192153.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the CVE ID for this vulnerability?
The CVE ID for this vulnerability is CVE-2020-4954.
What is the severity level of CVE-2020-4954?
The severity level of CVE-2020-4954 is medium (5.4).
Which versions of IBM Spectrum Protect Operations Center are affected by this vulnerability?
IBM Spectrum Protect Operations Center versions 7.1 and 8.1 are affected by this vulnerability.
How can a remote attacker exploit this vulnerability?
A remote attacker can exploit this vulnerability by bypassing authentication restrictions through improper session validation.
Are there any references available for CVE-2020-4954?
Yes, you can find more information about CVE-2020-4954 in the following references: [Reference 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/192153) and [Reference 2](https://www.ibm.com/support/pages/node/6404966).