medium4.8
CVE-2020-4956
IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped …
Impact
IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cache value and dumping that cached value to a file multiple times, a remote attacker could exploit this vulnerability to cause the consumption of all memory resources. IBM X-Force ID: 192156.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Spectrum Protect Operations Center | from 7.1.0.000 before 7.1.13.000 from 8.1.0.000 before 8.1.10.200 |