Write a vulnerability/finding to be included in a penetration testing report that includes the following sections in Australian English:
- Title
- Description: Two paragraphs - the first one describing the vulnerability (without mentioning impacts), and the second one about the specific instance found during the penetration test.
- Impacts: One paragraph describing the consequences of the vulnerability without using the word "impacts."
- Recommendation: One short, concise paragraph.

Use the following information:
title: IBM Spectrum Vulnerabilities
description:
An IBM Spectrum Protect Web Client was discovered on the IVR server, hosted on TCP port 1581. Inspection of the Java Network Launch Protocol (JNLP) which was available for download from this server showed that the version of the IBM Spectrum Client in use was: 
* 8.1.9.0

Investigation of this software version uncovered that it was vulnerable to several security flaws. These flaws are disclosed by IBM at the following resource: 
* https://www.ibm.com/support/pages/security-bulletin-ibm-spectrum-protect-client-and-ibm-spectrum-protect-space-management-web-user-interface-vulnerable-authentication-bypass-and-clickjacking-cve-2020-4494-cve-2020-4406

[figure: IBM Spectrum Web Client]] shows the web interface component of this software being discovered. 

(evidence:vulnerability:24244:Screen_Shot_2022-06-27_at_3.34.55_pm.png)

[caption: IBM Spectrum Web Client]
impacts:
The security flaws in the IBM Spectrum Protect Client could result in the following impacts: 
* The IBM Spectrum Protect Backup-Archive Client web user interface and IBM Spectrum Protect for Space Management web user interface could allow an attacker to bypass authentication due to improper session validation which can result in access to unauthorised resources.
* The IBM Spectrum Protect Backup-Archive Client web user interface and IBM Spectrum Protect for Space Management web user interface could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious website, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
Recommendation:
Triskele Labs recommends updating the IBM Spectrum Protect Web Client to the latest available version to ensure all security patches are implemented. Add stress words which are capitalized. Limit those stress words for less than 18 times.
user