{"containers":{"cna":{"affected":[{"product":"Spectrum Protect Operations Center","vendor":"IBM","versions":[{"status":"affected","version":"7.1.0.000"},{"status":"affected","version":"8.1.0.000"},{"status":"affected","version":"7.1.10"},{"status":"affected","version":"8.1.9"}]}],"datePublic":"2020-09-01T00:00:00.000Z","descriptions":[{"lang":"en","value":"IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782."}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","exploitCodeMaturity":"UNPROVEN","integrityImpact":"HIGH","privilegesRequired":"NONE","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":7.9,"temporalSeverity":"HIGH","userInteraction":"NONE","vectorString":"CVSS:3.0/I:H/AC:L/A:N/UI:N/PR:N/S:U/AV:N/C:H/RL:O/E:U/RC:C","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Gain Access","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2020-09-02T18:25:25.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://www.ibm.com/support/pages/node/6325341"},{"name":"ibm-spectrum-cve20204693-code-exec (186782)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/186782"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2020-09-01T00:00:00","ID":"CVE-2020-4693","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Spectrum Protect Operations Center","version":{"version_data":[{"version_value":"7.1.0.000"},{"version_value":"8.1.0.000"},{"version_value":"7.1.10"},{"version_value":"8.1.9"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code on the system, caused by improper validation of data prior to export. IBM X-Force ID: 186782."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"L","AV":"N","C":"H","I":"H","PR":"N","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Gain Access"}]}]},"references":{"reference_data":[{"name":"https://www.ibm.com/support/pages/node/6325341","refsource":"CONFIRM","title":"IBM Security Bulletin 6325341 (Spectrum Protect Operations Center)","url":"https://www.ibm.com/support/pages/node/6325341"},{"name":"ibm-spectrum-cve20204693-code-exec (186782)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/186782"}]}}},"adp":[{"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-04T08:14:57.496Z"},"title":"CVE Program Container","references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://www.ibm.com/support/pages/node/6325341"},{"name":"ibm-spectrum-cve20204693-code-exec (186782)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/186782"}]}]},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2020-4693","datePublished":"2020-09-02T18:25:25.686Z","dateReserved":"2019-12-30T00:00:00.000Z","dateUpdated":"2024-09-17T03:07:44.052Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"}