CVE-2020-4348 MEDIUM

CVE-2020-4348

Vendor Ibm
Product Spectrum Scale
Published May 27, 2020
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.0/A:N/I:H/PR:L/C:N/AV:N/S:U/AC:L/UI:N/RC:C/E:U/RL:O

What the vulnerability does

01Description

IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.4 could allow an authenticated GUI user to perform unauthorized actions due to missing function level access control. IBM X-Force ID: 178414

Key dates

02Disclosure timeline

May 27, 2020 CVE published
September 16, 2024 Record updated