ibm-spectrum-cve20204496-info-disc (182046)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/182046 CVE-2020-4496
MEDIUM
Record summary
CVE-2020-4496 has a selected CVSS score of 5.9 (medium).
Description
The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent is subject to a man-in-the-middle attack due to improper certificate validation. IBM X-Force ID: 182046.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Spectrum Protect PlusBrowse IBM / Spectrum Protect Plus | CVE List | 10.1.0.0 | affected |
| 10.1.8.0 | affected |
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-4496 ibm.comConfirmation
https://www.ibm.com/support/pages/node/6525346