Vulnerability in Ibm Spectrum Protect For Space Management
CVE-2021-20546
IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and cause the application to crash. IBM X-Force ID: 198934
EPSS: 0.000 (12.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.2 (Medium). Vector: CVSS:3.0/A:H/S:U/I:N/UI:N/AV:L/AC:L/C:N/PR:N/RL:O/RC:C/E:U.
Affected products
- Ibm Spectrum Protect For Space Management — versions 8.1.0.0, 8.1.11.0
References
- www.ibm.com/support/pages/node/6445497 (x_refsource_CONFIRM)
- ibm-spectrum-cve202120546-bo (198934) (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2021-20546?
- CVE-2021-20546 is a medium-severity vulnerability in Ibm Spectrum Protect For Space Management. CVSS score: 6.2/10. Published 2021-04-26.
- How severe is CVE-2021-20546?
- Medium severity. CVSS v3 base score is 6.2 out of 10.