PT-2021-12233 · Ibm · Ibm Cloud Pak System

Published 2021-01-04 · Updated 2021-07-21 · CVE-2020-4919

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak System version 2.3

Description The issue is related to insufficient logout controls, which could allow an authenticated privileged user to impersonate another user on the system.

Recommendations For IBM Cloud Pak System version 2.3, consider implementing additional logout controls or access restrictions to prevent user impersonation until a patch is available. As a temporary workaround, restrict access to sensitive areas of the system to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-4919

Affected Products

Ibm Cloud Pak System

References · 6

• https://osv.dev/vulnerability/CVE-2020-4919 · Vendor Advisory
• https://ibm.com/support/pages/node/6393554 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/191395 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4919 · Security Note
• https://t.me/cibsecurity/21533 · Telegram Post
• https://t.me/cvenotify/8149 · Telegram Post