CVEvulnerability

CVE-2020-4926

9.1 CRITICAL Published 2022-05-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-05-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.0 ([email protected])
5.7 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-862

Description

A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191600.

Affected configurations

• ibm elastic storage system (< 6.1.3.0) • ibm spectrum scale (< 5.1.3.0)

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References