ibm-spectrum-cve20204703-file-upload (187188)

https://www.ibm.com/support/pages/node/6328867

The IBM Spectrum Protect Plus (SPP) administrative console running on the remote host is affected by a remote code execution vulnerability due to the fact that it allows remote installation of console plugins. An unauthenticated, remote attacker can exploit this and CVE-2020-4711 together, via specially crafted HTTP requests, to execute arbitrary code on the system with root privileges.

Note that the application is reportedly affected by other vulnerabilities; however, this plugin has not tested for those issues.

CVE-2020-4703

high

Tenable Plugins

critical