PT-2020-17965 · Ibm · Ibm Spectrum Scale

Published 2020-04-03 · Updated 2021-07-21 · CVE-2020-4273

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.2 through 5.0

Description The issue allows a local unprivileged attacker with intimate knowledge of the environment to execute commands as root using specially crafted input.

Recommendations For IBM Spectrum Scale versions 4.2 through 5.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-4273

Affected Products

Ibm Spectrum Scale

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-4273 · Security Note
• https://ibm.com/support/pages/node/6151701 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/175977 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4273 · Vendor Advisory
• https://t.me/cvenotify/2401 · Telegram Post