CVE-2020-4890
CVE-2020-4890
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.4EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
16 Mar 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the REST API to cause a denial of service due to weak or absense of rate limiting. IBM X-Force ID: 190973.
CVSS:3.0/A:H/AV:L/I:N/UI:N/C:N/PR:H/AC:L/S:U/RL:O/E:U/RC:C
Affected products
IBM · Spectrum Scale