{"id":"CVE-2020-4469","published":"2020-06-15T13:25:25Z","modified":"2024-09-16T18:19:46Z","title":"IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary code on the system","vendor":"IBM","product":"Spectrum Protect Plus","tier":"tail","description":{"text":"IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. This vulnerability is due to an incomplete fix for CVE-2020-4211. IBM X-Force ID: 181724.","provenance":"source","from":"CVE.org"},"cvss":{"score":8.1,"severity":"HIGH","version":"3.0","vector":"CVSS:3.0/A:H/I:H/UI:N/S:U/PR:N/AC:H/C:H/AV:N/E:U/RC:C/RL:O","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.13388,"percentile":0.96408,"provenance":"source"},"cwes":[],"references":[{"url":"https://www.ibm.com/support/pages/node/6221358","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/181724","tags":["vdb-entry","x_refsource_XF"]},{"url":"https://www.tenable.com/security/research/tra-2020-37","tags":["x_refsource_MISC"]}],"priority":{"score":25.0,"factors":[{"name":"EPSS percentile","points":19.28},{"name":"CVSS severity","points":5.67}]},"vendorSlug":"ibm","affectedVersions":[{"vendor":"IBM","product":"Spectrum Protect Plus","versions":["10.1.0","10.1.5"]}],"euvd":{"id":"EUVD-2020-25716","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-ibm-spectrum-protect-plus-cve-2020-4211","parents":[{"from":"CVE-2020-4211","to":"CVE-2020-4469","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"This vulnerability is due to an incomplete fix for CVE-2020-4211.","from":"CVE.org","in":"CVE-2020-4469"},{"kind":"similar","provenance":"machine","score":0.8,"basis":"same product + description similarity"}]}]}}