CVE-2020-4918

CVSS 2.3 LOWEPSS 0.3%

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 2.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

04 ene 2021Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager. IBM X-Force ID: 191392.

CVSS:3.0/A:N/AV:L/AC:L/UI:N/PR:H/I:N/C:L/S:U/RC:C/RL:O/E:U

Productos afectados

IBM · Cloud Pak System

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/191392 https://www.ibm.com/support/pages/node/6393554