{"id":"CVE-2020-5022","state":"PUBLISHED","title":"IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which can result in an attacker obtaining information they are not a","description":"IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which can result in an attacker obtaining information they are not authorized to access. IBM X-Force ID: 193658.","publishedAt":"2021-01-08T19:10:26.275Z","updatedAt":"2024-09-16T22:51:19.234Z","severity":{"score":5.3,"label":"Medium","version":"3.0","vector":"CVSS:3.0/C:L/AC:L/PR:N/UI:N/A:N/S:U/AV:N/I:N/RL:O/RC:C/E:U","source":"ibm"},"assigner":"ibm","products":["IBM Spectrum Protect Plus"],"affected":[{"vendor":"IBM","product":"Spectrum Protect Plus","versions":[{"version":"10.1.0","status":"affected"},{"version":"10.1.6","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/6398754","https://exchange.xforce.ibmcloud.com/vulnerabilities/193658"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:35.543Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/5xxx/CVE-2020-5022.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-5022","state":"PUBLISHED","datePublished":"2021-01-08T19:10:26.275Z","dateUpdated":"2024-09-16T22:51:19.234Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2019-12-30T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which can result in an attacker obtaining information they are not authorized to access. IBM X-Force ID: 193658."}],"affected":[{"vendor":"IBM","product":"Spectrum Protect Plus","versions":[{"version":"10.1.0","status":"affected"},{"version":"10.1.6","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6398754","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/193658","name":"ibm-spectrum-cve20205022-info-disc (193658)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"NONE","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":4.6,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.0/C:L/AC:L/PR:N/UI:N/A:N/S:U/AV:N/I:N/RL:O/RC:C/E:U","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2021-01-08T19:10:26.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2021-01-07T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2021-01-07T00:00:00","ID":"CVE-2020-5022","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Spectrum Protect Plus","version":{"version_data":[{"version_value":"10.1.0"},{"version_value":"10.1.6"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which can result in an attacker obtaining information they are not authorized to access. IBM X-Force ID: 193658."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"L","AV":"N","C":"L","I":"N","PR":"N","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"https://www.ibm.com/support/pages/node/6398754","refsource":"CONFIRM","title":"IBM Security Bulletin 6398754 (Spectrum Protect Plus)","url":"https://www.ibm.com/support/pages/node/6398754"},{"name":"ibm-spectrum-cve20205022-info-disc (193658)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/193658"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6398754","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/193658","name":"ibm-spectrum-cve20205022-info-disc (193658)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T08:22:09.036Z"}}]}}}