Vulnerabilities > CVE-2021-20432 - Unspecified vulnerability in IBM Spectrum Protect Plus

CVSS 6.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

ibm

NVD

Published: 2021-04-26

Updated: 2021-04-30

Summary

IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 196344.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Spectrum Protect Plus 10.1.0 IBM Spectrum Protect Plus 10.1.1 IBM Spectrum Protect Plus 10.1.1.142 IBM Spectrum Protect Plus 10.1.2 IBM Spectrum Protect Plus 10.1.2.209 IBM Spectrum Protect Plus 10.1.2.219 IBM Spectrum Protect Plus 10.1.2.247 IBM Spectrum Protect Plus 10.1.2.271 IBM Spectrum Protect Plus 10.1.2.303 IBM Spectrum Protect Plus 10.1.2.350 IBM Spectrum Protect Plus 10.1.3 IBM Spectrum Protect Plus 10.1.3.236 IBM Spectrum Protect Plus 10.1.3.286 IBM Spectrum Protect Plus 10.1.4 IBM Spectrum Protect Plus 10.1.4.145 IBM Spectrum Protect Plus 10.1.4.179 IBM Spectrum Protect Plus 10.1.4.222 IBM Spectrum Protect Plus 10.1.4.254 IBM Spectrum Protect Plus 10.1.4.277 IBM Spectrum Protect Plus 10.1.5 IBM Spectrum Protect Plus 10.1.5.2130 IBM Spectrum Protect Plus 10.1.5.2153 IBM Spectrum Protect Plus 10.1.5.2181 IBM Spectrum Protect Plus 10.1.5.2199 IBM Spectrum Protect Plus 10.1.6	29
OS	Linux Linux Linux Kernel -	1

Summary

Vulnerable Configurations

References