VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Feb 15, 2021· Updated Jun 17, 2026

CVE-2020-4954

CVE-2020-4954

Description

IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass authentication restrictions, caused by improper session validation . By using the configuration panel to obtain a valid session using an attacker controlled IBM Spectrum Protect server, an attacker could exploit this vulnerability to bypass authentication and gain access to a limited number of debug functions, such as logging levels. IBM X-Force ID: 192153.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/Spectrum Protect Operations Center3 versions
    cpe:2.3:a:ibm:spectrum_protect_operations_center:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:spectrum_protect_operations_center:*:*:*:*:*:*:*:*range: >=7.1.0.000,<7.1.13.000
    • (no CPE)range: 7.1, 8.1
    • (no CPE)range: 8.1
  • IBM/Spectrum Protectllm-fuzzy
    Range: 7.1, 8.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.