CVE-2020-4686

IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 186678.

Score

CVSS 3.1 8.1 High

Status

Modified - psirt@us.ibm.com

Published

2020-08-17

Last modified

2024-09-16

Affected products

• Flashsystem V5000 Firmware (Ibm)
• Flashsystem V7200 Firmware (Ibm)
• Flashsystem V9000 Firmware (Ibm)
• Flashsystem V9100 Firmware (Ibm)
• Flashsystem V9200 Firmware (Ibm)
• San Volume Controller And Storwize Family (Ibm)
• San Volume Controller Firmware (Ibm)
• Spectrum Virtualize (Ibm)
• Storwize V5000 Firmware (Ibm)
• Storwize V5000e Firmware (Ibm)
• Storwize V5100 Firmware (Ibm)
• Storwize V7000 Firmware (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/186678
• https://www.ibm.com/support/pages/node/6260199