PT-2021-12252 · Ibm · Ibm Spectrum Protect Operations Center

Published 2021-02-15 · Updated 2021-02-17 · CVE-2020-4955

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

C:H/S:C/A:H/AC:H/PR:L/UI:N/AV:A/I:H

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Operations Center versions 7.1 through 8.1

Description The issue is caused by improper parameter validation, allowing a remote attacker to execute arbitrary code on the system. An attacker could exploit this by creating an unspecified servlet request with specially crafted input parameters to load a malicious .dll with elevated privileges.

Recommendations For versions 7.1 and 8.1, consider disabling the servlet request functionality until a patch is available to prevent exploitation. Restrict access to the system to minimize the risk of loading malicious .dll files with elevated privileges.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-4955

Affected Products

Ibm Spectrum Protect Operations Center

References · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/192155 · Vendor Advisory
• https://ibm.com/support/pages/node/6404966 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4955 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4955 · Security Note
• https://t.me/cibsecurity/23602 · Telegram Post
• https://t.me/cvenotify/9965 · Telegram Post