Security Bulletin: Authentication Bypass, Arbitrary Directory Deletion, and Command Injection vulnerabilities in IBM Spectrum Protect Plus (CVE-2020-4208, CVE-2020-4214, CVE-2020-4206, CVE-2020-4241, CVE-2020-4242)

Summary IBM Spectrum Protect Plus is vulnerable to authentication bypass, arbitrary directory deletion, and command injection which allows a remote attacker to execute arbitrary code on the system. Vulnerability Details CVEID: CVE-2020-4208 DESCRIPTION: IBM Spectrum Protect Plus contains hard-cod...

CVE-2020-4214

CVE-2020-4214 affects IBM Spectrum Protect Plus 10.1.0–10.1.5. It is caused by improper validation of user-supplied input, allowing a remote attacker to remotely delete directories. The IBM bulletin lists the affected product, versions, and impact (arbitrary directory deletion). Remediation: appl...