HIGH🇬🇧 English

CVE-2020-4686

CVSS 8.1v3.1pub. 2020-08-17upd. 2024-11-21

IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 186678.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

  • IBM Flashsystem V5000

    HW
    Ibm
    wszystkie wersje

  • IBM Flashsystem V5000 Firmware

    OS
    Ibm
    8.3.1

  • IBM Flashsystem V7200

    HW
    Ibm
    wszystkie wersje

  • IBM Flashsystem V7200 Firmware

    OS
    Ibm
    8.3.1

  • IBM Flashsystem V9000

    HW
    Ibm
    wszystkie wersje

  • IBM Flashsystem V9000 Firmware

    OS
    Ibm
    8.3.1

  • IBM Flashsystem V9100

    HW
    Ibm
    wszystkie wersje

  • IBM Flashsystem V9100 Firmware

    OS
    Ibm
    8.3.1

  • IBM Flashsystem V9200

    HW
    Ibm
    wszystkie wersje

  • IBM Flashsystem V9200 Firmware

    OS
    Ibm
    8.3.1

  • IBM San Volume Controller

    HW
    Ibm
    wszystkie wersje

  • IBM San Volume Controller Firmware

    OS
    Ibm
    8.3.1

  • IBM Spectrum Virtualize

    APP
    Ibm
    8.3.1

  • IBM Storwize V5000

    HW
    Ibm
    wszystkie wersje

  • IBM Storwize V5000e

    HW
    Ibm
    wszystkie wersje

  • IBM Storwize V5000e Firmware

    OS
    Ibm
    8.3.1

  • IBM Storwize V5000 Firmware

    OS
    Ibm
    8.3.1

  • IBM Storwize V5100

    HW
    Ibm
    wszystkie wersje

  • IBM Storwize V5100 Firmware

    OS
    Ibm
    8.3.1

  • IBM Storwize V7000

    HW
    Ibm
    wszystkie wersje

  • IBM Storwize V7000 Firmware

    OS
    Ibm
    8.3.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2017-5638CRITICAL9.8⚠ KEVten sam produkt

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect ex...

CVE-2021-38969CRITICAL9.8ten sam produkt

IBM Spectrum Virtualize 8.2, 8.3, and 8.4 could allow an attacker to allow unauthorized access due to the reus...

CVE-2017-1710CRITICAL9.8ten sam produkt

A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to...

CVE-2021-29873HIGH8.1ten sam produkt

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial ...

CVE-2018-1433HIGH7.5ten sam produkt

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3,...

CVE-2020-4686 — HIGH 8.1 | CVEbaza.pl