9.1

CVE-2020-4926

A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191600.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
IbmElastic Storage System Version < 6.1.3.0
   LinuxLinux Kernel Version-
IbmSpectrum Scale Version < 5.1.3.0
   LinuxLinux Kernel Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.65% 0.462
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
psirt@us.ibm.com 5.7 1.4 4.2
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://exchange.xforce.ibmcloud.com/vulnerabilities/191600
Vendor Advisory
VDB Entry
https://www.ibm.com/support/pages/node/6565399
Patch
Vendor Advisory
https://www.ibm.com/support/pages/node/6589109
Patch
Vendor Advisory