返回 CVE 浏览器

CVE-2020-4917

HIGH

8.8

CVSS Severity Score

EPSS Score0.0050%

EPSS Percentile6.91th

Published2021年1月4日

Last Modified2024年11月21日

Vulnerability Description

IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191391.

Affected Platforms (CPE)

📦

Ibm

Cloud Pak System

>= 2.3.0.0 and < 2.3.3.3

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/191391

🔗 https://www.ibm.com/support/pages/node/6393554

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/191391

🔗 https://www.ibm.com/support/pages/node/6393554

相关漏洞威胁

CVE-2019-45219.8

Platform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection. A remote attacker could execute ar...

CVE-2020-46279.0

IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary comman...

CVE-2019-41308.8

IBM Cloud Pak System 2.3 and 2.3.0.1 could allow a remote attacker to upload arbitrary files, which could allow the attacker to ex...

CVE-2021-204797.5

IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could allow an at...