CVE-2020-4211

CVE-2020-4211 affects IBM Spectrum Protect Plus 10.1.0 and 10.1.5. A flaw in the Administrative Console Framework allows remote command execution by crafting a hostname parameter in an HTTP request, leading to arbitrary code execution (root). The issue is tied to an incomplete fix and is also ref...

CVE-2020-4211

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175022...

CVE-2020-4210

IBM Spectrum Protect Plus versions 10.1.0–10.1.5 are affected by a remote code execution (command injection) vulnerability. The flaw exists in the Administrative Console Framework service and results from lack of proper validation of a user-supplied string before using it to execute a system call...

CVE-2020-4210

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175020...

CVE-2019-4703

Summary: CVE-2019-4703 affects IBM Spectrum Protect Plus. Versions 10.1.0–10.1.5 (and 10.5.0 per some sources) could allow an attacker with intimate knowledge of the system protecting Microsoft SQL or Microsoft Exchange to obtain highly sensitive information (e.g., user IDs and passwords). Techni...

CVE-2019-4703

IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, could allow an attacker with intimate knowledge of the system to obtain highly sensitive information...

IBM Spectrum Protect Plus Information Disclosure Vulnerability

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. A security vulnerability exists in IBM...

PT-2020-11035

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus versions 10.1.0 through 10.5.0 Description The issue allows an attacker with intimate knowledge of the system to obtain highly sensitive information when protecting Microsoft SQL or Microsoft Exchange. Recommendations...

CVE-2020-4213: Improper Neutralization of Special Elements used in an OS Command

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175024...

CVE-2020-4222: Improper Neutralization of Special Elements used in an OS Command

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175091...

CVE-2020-4211: Improper Neutralization of Special Elements used in an OS Command

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175022...

CVE-2019-4703: Undefined Security Weakness

IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, could allow an attacker with intimate knowledge of the system to obtain highly sensitive information...

PT-2020-17923

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5 Description The issue allows a remote attacker to execute arbitrary code on the system by using a specially crafted HTTP command. This can lead to the execution of arbitrary commands on...

PT-2020-17922

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5 Description The issue allows a remote attacker to execute arbitrary code on the system by using a specially crafted HTTP command. This enables the attacker to execute arbitrary commands ...

CVE-2020-4210: Improper Neutralization of Special Elements used in an OS Command

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175020...

CVE-2020-4212: Improper Input Validation

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175023...

PT-2020-6769

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5 Description The issue is related to the failure to neutralize special elements in user-input strings during the syntactic analysis of the hostname parameter. This can be exploited by a...

IBM Spectrum Protect Plus Command Injection Vulnerability

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. A command injection vulnerability exists in...

IBM Spectrum Protect Plus Command Injection Vulnerability (CNVD-2020-14208)

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. A command injection vulnerability exists in...

IBM Spectrum Protect Plus Command Injection Vulnerability (CNVD-2020-14213)

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. A command injection vulnerability exists in...