Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM4C523F746272EEEE1349A34BBBEBC52C302896AF08E7489E165CA54838013548
HistoryDec 04, 2020 - 8:01 a.m.

Security Bulletin: Denial of Service Vulnerability in Chart.js affects IBM Spectrum Protect Plus (CVE-2020-7746)

2020-12-0408:01:37
www.ibm.com
17

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

Summary

The Node.js chart.js module is vulnerable to a denial of service which may affect IBM Spectrum Protect Plus.

Vulnerability Details

CVEID:CVE-2020-7746
**DESCRIPTION:**Node.js chart.js moudle is vulnerable to a denial of service, caused by a prototype pollution flaw when processing the options parameter. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause a denial of service condition.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/190880 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Spectrum Protect Plus 10.1.0-10.1.6

Remediation/Fixes

Spectrum Protect Plus Release First Fixing VRM Level Platform Link to Fix
10.1 10.1.7 Linux <https://www.ibm.com/support/pages/node/6330495&gt;

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm spectrum protect pluseq10.1

Related

redhatcve 1
debiancve 1
nodejs 1
osv 2
cve 1
ubuntucve 1
ibm 3
prion 1
veracode 1
github 1
nessus 1
ics 1
redhat 1
redhatcve
redhatcve
CVE-2020-7746
2022-06-14 16:29:19
debiancve
debiancve
CVE-2020-7746
2020-10-29 08:15:00
nodejs
nodejs
Prototype pollution in chart.js
2021-05-10 18:51:27
osv
osv
Prototype pollution in chart.js
2021-05-10 18:47:53
CVE-2020-7746
2020-10-29 08:15:12
cve
cve
CVE-2020-7746
2020-10-29 08:15:00
ubuntucve
ubuntucve
CVE-2020-7746
2020-10-29 00:00:00
ibm
ibm
Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to denial of service due to Chart.js (CVE-2020-7746)
2023-12-01 10:32:50
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.1
2022-10-28 18:30:08
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)
2022-04-11 15:17:28
prion
prion
Code injection
2020-10-29 08:15:00
veracode
veracode
Prototype Pollution
2020-10-30 03:59:08
github
github
Prototype pollution in chart.js
2021-05-10 18:47:53
nessus
nessus
Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 44, 9.x < 9.0.0 Patch 37, 10.0.x < 10.0.5 Multiple Vulnerabilities
2023-10-26 00:00:00
ics
ics
Mitsubishi Electric EcoWebServerIII
2022-02-24 12:00:00
redhat
redhat
(RHSA-2022:6813) Important: Red Hat Process Automation Manager 7.13.1 security update
2022-10-05 10:42:47

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON
Related for 4C523F746272EEEE1349A34BBBEBC52C302896AF08E7489E165CA54838013548
redhatcve1debiancve1nodejs1osv2cve1ubuntucve1ibm3prion1veracode1github1nessus1ics1redhat1