VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jun 15, 2020· Updated Jun 17, 2026

CVE-2020-4406

CVE-2020-4406

Description

IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 179488.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • IBM/Spectrum Protect Client3 versions
    cpe:2.3:a:ibm:spectrum_protect_client:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:spectrum_protect_client:*:*:*:*:*:*:*:*range: >=8.1.7.0,<=8.1.9.1
    • (no CPE)range: 8.1.7.0 - 8.1.9.1
    • (no CPE)range: 8.1.7.0
  • IBM/Spectrum Protect For Space Management4 versions
    cpe:2.3:a:ibm:spectrum_protect_for_space_management:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:spectrum_protect_for_space_management:*:*:*:*:*:*:*:*range: >=8.1.7.0,<=8.1.9.1
    • (no CPE)range: 8.1.7.0 - 8.1.9.1
    • (no CPE)range: 8.1.9.0
    • (no CPE)range: 8.1.7.0
  • IBM/Spectrum Protect Servercpe-rescue
    Range: 8.1.9.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.