CVEブラウザに戻る

CVE-2020-4627

CRITICAL

9.0

CVSS Severity Score

EPSS Score0.0590%

EPSS Percentile22.22th

Published2020年11月30日

Last Modified2024年11月21日

Vulnerability Description

IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 185367.

Affected Platforms (CPE)

📦

Ibm

Cloud Pak For Security

= 1.3.0.1

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/185367

🔗 https://www.ibm.com/support/pages/node/6372538

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/185367

🔗 https://www.ibm.com/support/pages/node/6372538

関連する脆弱性情報

CVE-2021-205789.8

IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions d...

CVE-2021-205389.1

IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform actions they s...

CVE-2021-298947.5

IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorithms that c...

CVE-2021-296967.2

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated atta...