IBM has issued fixes for vulnerabilities in Spectrum Protect Plus, Big Blue s security tool found under the umbrella of its Spectrum data storage software branding. The flaws can be exploited by remote attackers to execute code on vulnerable systems. The vulnerabilities (CVE-2020-4703 and CVE-2019-4711) affect versions 10.1.0 through 10.6 of the software. IBM has released the patches and an advisory disclosing the flaws on Monday. The bug ranks 8 out of 10 on the CVSS scale, making it high-severity.
Source: https://threatpost.com/ibm-flaws-spectrum-protect-plus/159268/