Lucene search

K
cvelistIbmCVELIST:CVE-2020-4688
HistoryJan 20, 2021 - 3:00 p.m.

CVE-2020-4688

2021-01-2015:00:26
ibm
www.cve.org
4
ibm security guardium
command injection
vulnerability
local attacker
arbitrary commands

CVSS3

5.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C

EPSS

0

Percentile

5.1%

IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on the system as an unprivileged user, caused by command injection vulnerability. IBM X-Force ID: 186700.

CNA Affected

[
  {
    "product": "Security Guardium",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "10.6"
      },
      {
        "status": "affected",
        "version": "11.2"
      }
    ]
  }
]

CVSS3

5.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C

EPSS

0

Percentile

5.1%

Related for CVELIST:CVE-2020-4688