HIGH🇵🇱 Wersja polska

CVE-2020-4686

CVSS 8.1v3.1pub. 2020-08-17upd. 2024-11-21

IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 186678.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

  • IBM Flashsystem V5000

    HW
    Ibm
    all versions

  • IBM Flashsystem V5000 Firmware

    OS
    Ibm
    8.3.1

  • IBM Flashsystem V7200

    HW
    Ibm
    all versions

  • IBM Flashsystem V7200 Firmware

    OS
    Ibm
    8.3.1

  • IBM Flashsystem V9000

    HW
    Ibm
    all versions

  • IBM Flashsystem V9000 Firmware

    OS
    Ibm
    8.3.1

  • IBM Flashsystem V9100

    HW
    Ibm
    all versions

  • IBM Flashsystem V9100 Firmware

    OS
    Ibm
    8.3.1

  • IBM Flashsystem V9200

    HW
    Ibm
    all versions

  • IBM Flashsystem V9200 Firmware

    OS
    Ibm
    8.3.1

  • IBM San Volume Controller

    HW
    Ibm
    all versions

  • IBM San Volume Controller Firmware

    OS
    Ibm
    8.3.1

  • IBM Spectrum Virtualize

    APP
    Ibm
    8.3.1

  • IBM Storwize V5000

    HW
    Ibm
    all versions

  • IBM Storwize V5000e

    HW
    Ibm
    all versions

  • IBM Storwize V5000e Firmware

    OS
    Ibm
    8.3.1

  • IBM Storwize V5000 Firmware

    OS
    Ibm
    8.3.1

  • IBM Storwize V5100

    HW
    Ibm
    all versions

  • IBM Storwize V5100 Firmware

    OS
    Ibm
    8.3.1

  • IBM Storwize V7000

    HW
    Ibm
    all versions

  • IBM Storwize V7000 Firmware

    OS
    Ibm
    8.3.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2017-5638CRITICAL9.8⚠ KEVPL ✓same product

RCE w Apache Struts 2 poprzez błędną obsługę nagłówków HTTP (Jakarta Multipart parser)

CVE-2021-38969CRITICAL9.8PL ✓same product

IBM Spectrum Virtualize — nieautoryzowany dostęp przez ponowne użycie danych uwierzytelniających

CVE-2017-1710CRITICAL9.8PL ✓same product

Privilege escalation w IBM Storwize V7000 Service Assistant GUI

CVE-2021-29873HIGH8.1same product

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial ...

CVE-2018-1433HIGH7.5same product

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3,...