CVE-2020-4222

CVE-2020-4222 affects IBM Spectrum Protect Plus (versions 10.1.0–10.1.5). The weakness is a command injection flaw in the Administrative Console Framework that, when processing HTTP commands, can lead to remote code execution with the attacker’s payload executed in the context of the target. The ...

Security Bulletin: Command injection vulnerabilities in IBM Spectrum Protect Plus (CVE-2020-4210, CVE-2020-4213, CVE-2020-4222, CVE-2020-4212, CVE-2020-4211)

Summary Command injection vulnerabilities in IBM Spectrum Protect Plus could allow a remote attacker to execute arbitrary code on the system. Vulnerability Details CVEID: CVE-2020-4210 DESCRIPTION: IBM Spectrum Protect Plus could allow a remote attacker to execute arbitrary code on the system. By...