CVE-2020-4497: IBM Spectrum Protect Plus

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in the communication flow between Spectrum Protect Plus vSnap and its agents. An attacker could obtain information using main in the middle techniques. IBM X-Force ID: 182106.

Affected products

• IBM Spectrum Protect Plus: from 10.1.0, before 10.1.13 (fixed in 10.1.13)

Published 2022-12-14. Last modified 2026-06-17.