Vulnerabilities > CVE-2020-5022 - Missing Authorization vulnerability in IBM Spectrum Protect Plus

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

ibm

CWE-862

NVD

Published: 2021-01-08

Updated: 2021-07-21

Summary

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which can result in an attacker obtaining information they are not authorized to access. IBM X-Force ID: 193658.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Spectrum Protect Plus 10.1.0 IBM Spectrum Protect Plus 10.1.1 IBM Spectrum Protect Plus 10.1.1.142 IBM Spectrum Protect Plus 10.1.2 IBM Spectrum Protect Plus 10.1.2.209 IBM Spectrum Protect Plus 10.1.2.219 IBM Spectrum Protect Plus 10.1.2.247 IBM Spectrum Protect Plus 10.1.2.271 IBM Spectrum Protect Plus 10.1.2.303 IBM Spectrum Protect Plus 10.1.2.350 IBM Spectrum Protect Plus 10.1.3 IBM Spectrum Protect Plus 10.1.3.236 IBM Spectrum Protect Plus 10.1.3.286 IBM Spectrum Protect Plus 10.1.4 IBM Spectrum Protect Plus 10.1.4.145 IBM Spectrum Protect Plus 10.1.4.179 IBM Spectrum Protect Plus 10.1.4.222 IBM Spectrum Protect Plus 10.1.4.254 IBM Spectrum Protect Plus 10.1.4.277 IBM Spectrum Protect Plus 10.1.5 IBM Spectrum Protect Plus 10.1.5.2130 IBM Spectrum Protect Plus 10.1.5.2153 IBM Spectrum Protect Plus 10.1.5.2181 IBM Spectrum Protect Plus 10.1.5.2199 IBM Spectrum Protect Plus 10.1.6 IBM Spectrum Protect Plus 10.1.7	30
OS	Linux Linux Linux Kernel -	1

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References