High Severity

Security Bulletin: Static Credential Vulnerability in IBM Spectrum Protect Plus (CVE-2020-4854)

Nov 20, 2020 7:00 pm EST

Categorized: High Severity

Share this post:

IBM Spectrum Protect Plus contains hard-coded credentials which could allow a remote attacker to gain elevated privileges.

Affected product(s) and affected version(s):

Affected Product(s) Version(s)
IBM Spectrum Protect Plus 10.1.0-10.1.6

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6367823


Previous Post

Security Bulletin: IBM Spectrum Protect Plus allows use of TLS Version 1.1 protocols (CVE-2020-4783)

Next Post

Security Bulletin: Vulnerabilities in jQuery, Spring, Dom4j, MongoDB, Linux Kernel, Targetcli-fb, Jackson, Node.js, and Apache Commons affect IBM Spectrum Protect Plus
More stories

Security Bulletin: IBM Cloud Private is vulnerable to a Go vulnerability (CVE-2020-28362)

Feb 26, 2021 7:01 pm EST | High Severity

IBM Cloud Private is vulnerable to a Go vulnerability ...read more

Security Bulletin: IBM Cloud Private is vulnerable to MongoDB vulnerabilities (CVE-2020-7926, CVE-2020-7925, CVE-2020-7928)

Feb 26, 2021 7:01 pm EST | High Severity

IBM Cloud Private is vulnerable to MongoDB vulnerabilities ...read more

Security Bulletin: IBM Cloud Private is vulnerable to a Python vulnerability (CVE-2020-25659)

Feb 26, 2021 7:01 pm EST | High Severity

IBM Cloud Private is vulnerable to a Python vulnerability ...read more