Medium severity6.8NVD Advisory· Published Dec 14, 2022· Updated Jun 17, 2026

CVE-2020-4497

Description

IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in the communication flow between Spectrum Protect Plus vSnap and its agents. An attacker could obtain information using main in the middle techniques. IBM X-Force ID: 182106.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Spectrum Protect Plus
cpe:2.3:a:ibm:spectrum_protect_plus:*:*:*:*:*:*:*:*
Range: >=10.1.0,<10.1.13
IBM/Spectrum Protectllm-fuzzy
Range: 10.1.0 - 10.1.12
IBM/Spectrum Protect Servercpe-rescue
Range: 10.1.0

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/6847627nvdPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/182106nvdVDB EntryVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000