CVE-2020-4703

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute…

High · published September 15, 2020

CVSS v3.0
8.0
EPSS
2%
Percentile
77.9
In the wild
Unconfirmed
What it is

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the vulnerable server. This vulnerability is due to an incomplete fix for CVE-2020-4470. IBM X-Force ID: 187188.

The record
Technical detail
CVSS v3.0
8.0 · HIGH
Vector
CVSS:3.0/PR:L/C:H/UI:R/I:H/AV:N/S:U/AC:L/A:H/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.01765 · 77.9th percentile
Published
2020-09-15T13:50Z
EPSS history
Timeline
  • 15 SEP 13:50Z
    IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute…
    cvelistv5