CVE-2020-4497

MEDIUM

IBM Spectrum Protect Plus 10.1.0-10.1.12 - Cleartext Transmission of Sensitive Information

Title source: llm

Description

IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in the communication flow between Spectrum Protect Plus vSnap and its agents. An attacker could obtain information using main in the middle techniques. IBM X-Force ID: 182106.

References (2)

Core 2

Core References

Patch, Vendor Advisory vendor-advisory

https://www.ibm.com/support/pages/node/6847627

VDB Entry, Vendor Advisory vdb-entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/182106

Scores

CVSS v3 6.8

EPSS 0.0039

EPSS Percentile 30.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-319

Status published

Products (1)

ibm/spectrum_protect_plus 10.1.0 - 10.1.13

Published Dec 14, 2022

Tracked Since Feb 18, 2026