CVE-2020-4212

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 are affected by a command injection vulnerability in the Administrative Console Framework service when parsing the hfpackage parameter, leading to remote code execution with root privileges. Exploitation is possible via specially crafted HTTP commands w...

CVE-2020-4212

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175023...