Intrusion PreventionIBM.Spectrum.Protect.Plus.password.Command.Injection
Description
This indicates an attack attempt to exploit an Remote Code Execution Vulnerability in IBM Spectrum Protect Plus.
The vulnerability is due to a lack of input validation in the Administrative Console service when parsing a parameter. A remote authenticated attacker could exploit this vulnerability by sending a specially crafted request to a target system. Successful exploitation could lead to arbitrary code execution in the context of the root user.
Affected Products
IBM Spectrum Protect Plus 10.1.0
IBM Spectrum Protect Plus 10.1.5
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.ibm.com/support/pages/node/3178863
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 52122 |
| Created | Sep 12, 2022 |
| Updated | Mar 20, 2023 |
| Risk |
|
| CVE ID | CVE-2020-4222 |
| Exploit Prediction Score | 39.92% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | IBM |