RULE(RULE ID:331197)

Rule General Information
Release Date: 2020-09-21
Rule Name: IBM SPP Appliance Unauthenticated Network Configurations Modification Vulnerability (CVE-2020-4471)
Severity:
CVE ID:
Rule Protection Details
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions by send a specially crafted HTTP command to the remote server. IBM X-Force ID: 181726.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference: https://exchange.xforce.ibmcloud.com/vulnerabilities/181726
https://www.ibm.com/support/pages/node/6221358
https://www.tenable.com/security/research/tra-2020-37
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://www.ibm.com/support/pages/node/6221358