IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in the communication flow between Spectrum Protect Plus vSnap and its agents. An attacker could obtain information using main in the middle techniques. IBM X-Force ID: 182106.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/182106 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/pages/node/6847627 | Patch Vendor Advisory |
Configurations
History
07 Nov 2023, 03:23
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in the communication flow between Spectrum Protect Plus vSnap and its agents. An attacker could obtain information using main in the middle techniques. IBM X-Force ID: 182106. |
20 Dec 2022, 14:02
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ibm:spectrum_protect_plus:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.9 |
| CWE | CWE-319 | |
| First Time |
Ibm
Ibm spectrum Protect Plus |
|
| References | (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/182106 - VDB Entry, Vendor Advisory | |
| References | (MISC) https://www.ibm.com/support/pages/node/6847627 - Patch, Vendor Advisory |
14 Dec 2022, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-12-14 22:15
Updated : 2023-12-10 14:48
NVD link : CVE-2020-4497
Mitre link : CVE-2020-4497
CVE.ORG link : CVE-2020-4497
JSON object : View
Products Affected
ibm
- spectrum_protect_plus
CWE
CWE-319
Cleartext Transmission of Sensitive Information