CVE-2020-4771

Vulnerability

IBM Spectrum Protect Operations Center versions 8.1.0.000 through 8.1.10.xxx and 7.1.0.000 through 7.1.11.xxx contain a websocket endpoint that does not properly authenticate connections. This allows an unauthenticated remote attacker to subscribe to the websocket event stream and obtain sensitive information. [1]

Exploitation

An attacker can use known tools to connect to the websocket endpoint without any authentication. No special network position or user interaction is required; the attacker only needs network access to the Operations Center. By subscribing to the event stream, the attacker can receive real-time data. [1]

Impact

Successful exploitation results in the disclosure of sensitive information. The CVSS vector indicates low confidentiality impact, no integrity or availability impact. The attacker gains access to information that should be protected, potentially including operational data. [1]

Mitigation

As of the publication date (20 November 2020), no workarounds or mitigations are provided by IBM. The advisory states "None" under Workarounds and Mitigations. Users should monitor for future patches or updates from IBM. [1]