CVE-2020-5021

No fix known EPSS <1%CVSS 4.0

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 does not invalidate session after a password reset which could allow a local user to impersonate another user on the system. IBM X-Force ID: 193657.

Published 2021-01-08 · CVE record · OSV

Products: IBM Spectrum Protect Plus