PT-2020-18202 · Ibm · Ibm Spectrum Virtualize

Published 2020-08-17 · Updated 2021-07-21 · CVE-2020-4686

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Spectrum Virtualize version 8.3.1

Description The issue allows a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to.

Recommendations For IBM Spectrum Virtualize version 8.3.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-4686

Affected Products

Ibm Spectrum Virtualize

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-4686 · Security Note
• https://ibm.com/support/pages/node/6260199 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4686 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/186678 · Vendor Advisory