Security Bulletin: Information Disclosure in IBM Spectrum Protect Plus (CVE-2020-4565)

Summary IBM Spectrum Protect Plus uses insecure communication between the application and server which could allow an attacker to obtain sensitive information. Vulnerability Details CVEID: CVE-2020-4565 DESCRIPTION: IBM Spectrum Protect Plus could allow an attacker to obtain sensitive information...

CVE-2020-4565

CVE-2020-4565 affects IBM Spectrum Protect Plus 10.1.0–10.1.5, where insecure communication between the application and server can lead to information disclosure. The IBM Security Bulletin notes the root cause is insecure communications, with a CVSS base score around 5.9 (network access, high att...