CVE-2020-4956: ibm spectrum_protect_operations_center Uncontrolled Resource Consumption
Vulnerability summary
CVE-2020-4956 is a medium (CVSS 4.8) Uncontrolled Resource Consumption vulnerability in ibm spectrum_protect_operations_center. EPSS estimates a 0.46% chance of exploitation in the next 30 days, higher than 39.2% of scored vulnerabilities.
Timeline
- 15-02-2021PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cache value and dumping that cached value to a file multiple times, a remote attacker could exploit this vulnerability to cause the consumption of all memory resources. IBM X-Force ID: 192156.
CVSS metrics
4 scores · 2 sources · 3 versions- NVDNIST4.8MediumCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.46%
Chance of exploitation in the next 30 days
Percentile
39%
Versus all other CVEs
30-day change
0.00 pp
From 0.46% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm1 product
- spectrum_protect_operations_center8.1 | 7.1 | 8.1.10.100 | 7.1.12 | ≥ 7.1.0.000, < 7.1.13.000 | ≥ 8.1.0.000, < 8.1.10.200
1 vendor · 1 product