cbcvebase.
CVE-2020-4771
published 2020-11-23

CVE-2020-4771: IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitive information…

medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitive information, caused by improper authentication of a websocket endpoint. By using known tools to subscribe to the websocket event stream, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 188993.

Affected

6 ranges
VendorProductVersion rangeFixed in
ibmspectrum_protect_operations_center——
ibmspectrum_protect_operations_center——
ibmspectrum_protect_operations_center——
ibmspectrum_protect_operations_center——
ibmspectrum_protect_operations_center7.1.0.000 – 7.1.11—
ibmspectrum_protect_operations_center8.1.0.000 – 8.1.10—