CVE-2020-4214

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to arbitrary delete a directory caused by improper validation of user-supplied input. IBM X-Force ID: 175026...

CVE-2020-4214

CVE-2020-4214 affects IBM Spectrum Protect Plus 10.1.0–10.1.5. It is caused by improper validation of user-supplied input, allowing a remote attacker to remotely delete directories. The IBM bulletin lists the affected product, versions, and impact (arbitrary directory deletion). Remediation: appl...

CVE-2020-4208

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174975...

CVE-2020-4208

CVE-2020-4208 affects IBM Spectrum Protect Plus 10.1.0–10.1.5, where hard-coded credentials are used for inbound authentication, outbound communication, or internal data encryption. The root cause is hard-coded credentials in the product, leading to exposure of authentication and potential unauth...

CVE-2020-4206

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary commands on the system in the context of root user, caused by improper validation of user-supplied input. IBM X-Force ID: 174966...

CVE-2020-4206

CVE-2020-4206 affects IBM Spectrum Protect Plus 10.1.0–10.1.5. A remote attacker can execute arbitrary commands as root due to improper validation of user-supplied input. This is supported by multiple sources in the connected set (IBM X-Force, IBM security bulletin). Remediation per the IBM bulle...

PT-2020-17940

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale and IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5 Description The issue allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. This can be...

CVE-2020-4206: Improper Input Validation

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary commands on the system in the context of root user, caused by improper validation of user-supplied input. IBM X-Force ID: 174966...

CVE-2020-4208: Use of Hard-coded Credentials

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174975...

CVE-2020-4242: Improper Neutralization of Special Elements used in an OS Command

IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM...

PT-2020-17921

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5 Description The issue allows a remote attacker to traverse directories on the system by sending a specially-crafted URL request containing dot dot sequences /../ to create arbitrary file...

CVE-2020-4240: Improper Limitation of a Pathname to a Restricted Directory

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to overwrite or create arbitrary files on the system. IBM X-Force ID: 175417...

Logic Flaw Vulnerability in Spectrum's Smart Sports Platform

Spectrum Smart Sports Platform is a sports data management system with rich modeling functions such as physical fitness test, extracurricular exercise, sports scores, online course selection, theoretical exams and so on. A logic flaw vulnerability exists in the Spectrum Intelligent Sports Platfor...

PT-2020-5174

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5 Description The issue is caused by improper validation of user-supplied input, allowing a remote attacker to execute arbitrary commands on the system in the context of the root user. Thi...

PT-2020-17924

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5 Description The issue is caused by improper validation of user-supplied input, allowing a remote attacker to arbitrarily delete a directory. Recommendations For versions 10.1.0 through...

PT-2020-17939

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale and IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5 Description The issue allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. This can be...

PT-2020-17920

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5 Description The issue concerns hard-coded credentials, such as a password or cryptographic key, used by IBM Spectrum Protect Plus for inbound authentication, outbound communication to...

IBM Spectrum Protect Plus uploadHttpsCertificate Directory Traversal File Creation Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of IBM Spectrum Protect Plus. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Administrative...

CVE-2020-4241: Improper Neutralization of Special Elements used in an OS Command

IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM...

PT-2020-17938

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5 Description The issue allows a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to overwrite or create arbitrary files on the...