PT-2021-12125
CVE-2020-4496
·
تاريخ النشر
2021-12-13
·
تاريخ التحديث
2021-12-15
الوصف من
CVSS 3.1
6.8
متوسطةالمقاييسC:H/I:N/UI:N/AV:N/AC:H/S:C/PR:N/A:N
Name of the Vulnerable Software and Affected Versions:
IBM Spectrum Protect Plus versions 10.1.0.0 through 10.1.8.x
Description:
The server connection to an IBM Spectrum Protect Plus workload agent is subject to a man-in-the-middle attack due to improper certificate validation.
Recommendations:
For versions 10.1.0.0 through 10.1.8.x, consider implementing proper certificate validation to prevent man-in-the-middle attacks. As a temporary workaround, restrict access to the server connection to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾