← back
CVE-2020-4927

IBM Spectrum Scale information disclosure

CVSS 5.7 MEDIUMEPSS 0.3%CWE-200
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.7EPSS 0.3%KEV nãoPoC Nuclei Metasploit Patch referenciado
Lifecycle
15 Mar 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191695.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
Affected products
IBM · Spectrum Scale