Skip to content
OpenAdvisories
Medium · 4.8 CVE-2020-4956 EUVD-2020-26203GHSA-94wm-8j6r-283r

IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values t…

Published Feb 15, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cache value and dumping that cached value to a file multiple times, a remote attacker could exploit this vulnerability to cause the consumption of all memory resources. IBM X-Force ID: 192156.

Affected products

VendorProductAffectedFixed
IBM Spectrum Protect Operations Center 8.1, 7.1, 8.1.10.100, 7.1.12 —

References