CVE-2020-4471

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions by send a specially…

Medium · published June 15, 2020

CVSS v3.0
4.8
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions by send a specially crafted HTTP command to the remote server. IBM X-Force ID: 181726.

The record
Technical detail
CVSS v3.0
4.8 · MEDIUM
Vector
CVSS:3.0/AV:N/PR:N/AC:H/C:N/UI:N/S:U/A:L/I:L/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.02653 · 85.5th percentile
Published
2020-06-15T13:25Z
EPSS history
Timeline
  • 15 JUN 13:25Z
    IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions by send a specially…
    cvelistv5