CVE-2020-4686

🗓️ 17 Aug 2020 12:35:12Reported by ibmType

IBM Spectrum Virtualize 8.3.1 LDAP privilege escalatio

Reporter	Title	Published	Views	Family All 6
IBM Security Bulletins	Security Bulletin: LDAP vulnerability affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	29 Mar 202301:48	–	ibm
CNVD	IBM Spectrum Virtualize Elevation of Privilege Vulnerability	18 Aug 202000:00	–	cnvd
Cvelist	CVE-2020-4686	17 Aug 202012:35	–	cvelist
EUVD	EUVD-2020-25933	7 Oct 202500:30	–	euvd
NVD	CVE-2020-4686	17 Aug 202013:15	–	nvd
Prion	Code injection	17 Aug 202013:15	–	prion

NVD

Vulners

Node

ibm spectrum_virtualizeMatch8.3.1

ibm spectrum_virtualizeMatch8.3.1public_cloud

Node

ibm flashsystem_v5000_firmwareMatch8.3.1

AND

ibm flashsystem_v5000Match-

Node

ibm flashsystem_v7200_firmwareMatch8.3.1

AND

ibm flashsystem_v7200Match-

Node

ibm flashsystem_v9000_firmwareMatch8.3.1

AND

ibm flashsystem_v9000Match-

Node

ibm flashsystem_v9100_firmwareMatch8.3.1

AND

ibm flashsystem_v9100Match-

Node

ibm flashsystem_v9200_firmwareMatch8.3.1

AND

ibm flashsystem_v9200Match-

Node

ibm san_volume_controller_firmwareMatch8.3.1

AND

ibm san_volume_controllerMatch-

Node

ibm storwize_v5000_firmwareMatch8.3.1

AND

ibm storwize_v5000Match-

Node

ibm storwize_v5000e_firmwareMatch8.3.1

AND

ibm storwize_v5000eMatch-

Node

ibm storwize_v5100_firmwareMatch8.3.1

AND

ibm storwize_v5100Match-

Node

ibm storwize_v7000_firmwareMatch8.3.1

AND

ibm storwize_v7000Match-

[
  {
    "product": "SAN Volume Controller and Storwize Family",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.3.1"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/186678
ibm	www.ibm.com/support/pages/node/6260199

21 Nov 2024 05:33Current

7.8High risk

Vulners AI Score7.8

CVSS 25.5

CVSS 3.18.1

CVSS 36.8

EPSS0.00143