PT-2020-18086
CVE-2020-4471
·
Published
2020-06-15
·
Updated
2021-07-21
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions
IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5
Description
The issue allows an unauthenticated attacker to cause a denial of service or hijack DNS sessions by sending a specially crafted HTTP command to the remote server.
Recommendations
For IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5, update to a version that contains a fix for this issue to prevent potential denial of service or DNS session hijacking attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾