CVE-2020-4496

—

CVSS 3.1

5.9 medium

EPSS

<1%p46

Published

Dec 13, 2021 (Dec 13, 2021)

Modified

Jun 17, 2026

Description

The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent is subject to a man-in-the-middle attack due to improper certificate validation. IBM X-Force ID: 182046.

Vendors: ibm
Products: spectrum protect plus
Weakness: CWE-295
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.