CVE-2020-4470

CVE-2020-4470 describes a critical arbitrary file upload vulnerability affecting IBM Spectrum Protect Plus versions 10.1.0 through 10.1.5. An authenticated attacker could exploit this flaw in the Administrative Console to upload and execute arbitrary code on the vulnerable server. With a CVSS score of 8.0 (High), this vulnerability has a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, its potential for remote code execution warrants attention.