CVE-2020-4956

IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped…

Medium · published February 15, 2021

CVSS v3.0
4.8
EPSS
0%
Percentile
39.3
In the wild
Unconfirmed
What it is

IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cache value and dumping that cached value to a file multiple times, a remote attacker could exploit this vulnerability to cause the consumption of all memory resources. IBM X-Force ID: 192156.

The record
Technical detail
CVSS v3.0
4.8 · MEDIUM
Vector
CVSS:3.0/C:N/I:N/PR:L/AV:A/UI:N/A:H/S:U/AC:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00465 · 39.3th percentile
Published
2021-02-15T15:05Z
EPSS history
Timeline
  • 15 FEB 15:05Z
    IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped…
    cvelistv5