CVE-2020-4494

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-15 · updated 2026-06-17
Weakness: CWE-287

Description

IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow an attacker to bypass authentication due to improper session validation which can result in access to unauthorized resources. IBM X-Force ID: 182019.

Affected products

IBM Spectrum Protect Client: from 8.1.7.0 through 8.1.9.1; from 8.1.9.0 through 8.1.9.1
IBM Spectrum Protect for Space Management: from 8.1.7.0 through 8.1.9.1; from 8.1.9.0 through 8.1.9.1

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/182019
https://www.ibm.com/support/pages/node/6221448
https://exchange.xforce.ibmcloud.com/vulnerabilities/182019
https://www.ibm.com/support/pages/node/6221448

Get alerted when CVE-2020-4494 or the next vulnerability affects your stack