Authentication flaw

2020-11-2317:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.8%

JSON

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitive information, caused by improper authentication of a websocket endpoint. By using known tools to subscribe to the websocket event stream, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 188993.

CPENameOperatorVersion
spectrum_protect_operations_centerge7.1.0.000
spectrum_protect_operations_centerle7.1.11
spectrum_protect_operations_centerge8.1.0.000
spectrum_protect_operations_centerle8.1.10

Name	Operator	Version
spectrum_protect_operations_center	ge	7.1.0.000
spectrum_protect_operations_center	le	7.1.11
spectrum_protect_operations_center	ge	8.1.0.000
spectrum_protect_operations_center	le	8.1.10