Security Bulletin: Multiple vulnerabilities in IBM Spectrum Protect Plus (CVE-2020-4469, CVE-2020-4471, CVE-2020-4470)

Summary Multiple vulnerabilities in IBM Spectrum Protect Plus could allow a remote attacker to executive arbitrary code on the system, cause a denial or service, or hijack DNS sessions. Vulnerability Details CVEID: CVE-2020-4469 DESCRIPTION: IBM Spectrum Protect Plus could allow a remote attacker...

CVE-2020-4471

IBM Spectrum Protect Plus 10.1.0–10.1.5 is affected by CVE-2020-4471. An unauthenticated attacker could cause a denial of service or hijack DNS sessions by sending a specially crafted HTTP command to the remote server. Impact is described in the cited IBM bulletin and external references, with CV...