CVE-2020-4406

CVE-2020-4406 affects IBM Spectrum Protect Client (Linux/Windows) 8.1.7.0–8.1.9.1 and IBM Spectrum Protect for Space Management 8.1.7.0–8.1.9.1, with AIX 8.1.9.0–8.1.9.1 also listed. The vulnerability is a clickjacking exposure in the web user interface that could allow a remote attacker to hijac...

Security Bulletin: IBM Spectrum Protect Client and IBM Spectrum Protect for Space Management web user interface vulnerable to authentication bypass and clickjacking (CVE-2020-4494, CVE-2020-4406)

Summary The web user interface provided by the IBM Spectrum Protect Client and IBM Spectrum Protect for Space Management is vulnerable to authentication bypass and a clickjacking attack. Vulnerability Details CVEID: CVE-2020-4494 DESCRIPTION: The IBM Spectrum Protect Backup-Archive Client web use...