Security Bulletin: Information Disclosure vulnerability in IBM Spectrum Protect Server (CVE-2020-4591)

Summary The IBM Spectrum Protect Server may disclose sensitive information due to not encrypting the second chunk of an object in an encrypted container pool. Vulnerability Details CVEID: CVE-2020-4591 DESCRIPTION: The IBM Spectrum Protect Server could disclose sensitive information in nondefault...

CVE-2020-4591

IBM Spectrum Protect Server 8.1.0.000–8.1.10.000 is affected by an information disclosure vulnerability arising from occasionally not encrypting the second chunk of an object in an encrypted container pool in non-default settings. This is documented across multiple sources (NVD, IBM security bull...