CVE-2021-20432

IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 196344...

CVE-2021-20432

CVE-2021-20432 affects IBM Spectrum Protect Plus versions 10.1.0–10.1.7. The vulnerability arises from a misconfigured Cross-Origin Resource Sharing (CORS) policy that does not restrict the domain name to trusted domains, potentially enabling an attacker to perform privileged actions and exfiltra...