CVE-2020-4771: IBM Spectrum Protect Operations Center

Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days.

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitive information, caused by improper authentication of a websocket endpoint. By using known tools to subscribe to the websocket event stream, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 188993.

Affected products

• IBM Spectrum Protect Operations Center: from 7.1.0.000, up to and including 7.1.11; from 8.1.0.000, up to and including 8.1.10

Published 2020-11-23. Last modified 2026-06-17.