CVE-2020-4241

CVE-2020-4241 affects IBM Spectrum Protect Plus 10.1.0–10.1.5. A command injection exists due to lack of input validation in the Administrative Console’s uploadHttpsCertificate filename parameter, enabling a remote authenticated attacker to execute arbitrary commands on the target system. Connect...