2 lines
7.2 KiB
JSON
2 lines
7.2 KiB
JSON
{"affected":[{"affectedData":[{"product":"SAN Volume Controller and Storwize Family","vendor":"IBM","versions":[{"status":"affected","version":"8.3.1"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:spectrum_virtualize:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"257A4181-9C9A-41FA-B696-5D7E1E1EEE5C","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:spectrum_virtualize:8.3.1:*:*:*:public_cloud:*:*:*","matchCriteriaId":"E6CAB5CA-73E1-4CAD-9793-40A6DBC6FF81","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:flashsystem_v5000_firmware:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"34E0B118-BB59-4AA5-8E62-DD1A96A7EDCC","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:flashsystem_v5000:-:*:*:*:*:*:*:*","matchCriteriaId":"01CF1C5A-F06E-4B0C-99D6-A7D099DFB3C0","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:flashsystem_v7200_firmware:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"603DECB9-2DB7-454C-BDF6-A7FE16460A56","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:flashsystem_v7200:-:*:*:*:*:*:*:*","matchCriteriaId":"642DFC1E-FA8E-4751-9875-9B157D0E2D7B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:flashsystem_v9000_firmware:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CA16BD66-A859-43EE-B992-669C8A956FEB","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:flashsystem_v9000:-:*:*:*:*:*:*:*","matchCriteriaId":"DB9C13EA-8C4C-42C5-A451-611FF0904AE8","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:flashsystem_v9100_firmware:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D11841F3-5122-4955-88CC-0E7F700111E8","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:flashsystem_v9100:-:*:*:*:*:*:*:*","matchCriteriaId":"7C9885F2-D9C5-4F91-8BCE-60684AFFC789","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:flashsystem_v9200_firmware:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E8B519DF-1F09-4F1A-8108-C6E382F1052F","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:flashsystem_v9200:-:*:*:*:*:*:*:*","matchCriteriaId":"07A8B986-90FE-4AB4-B8E7-9479194FE3A1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:san_volume_controller_firmware:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"91A752A0-06B6-4768-9F19-0B28F6AB3D44","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:san_volume_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"D5D84487-CEBA-48A0-9B15-A0300D992E3D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:storwize_v5000_firmware:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DB2A11B4-1378-44B3-B007-0ACCCB48CE67","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:storwize_v5000:-:*:*:*:*:*:*:*","matchCriteriaId":"F0B69C8D-32A4-449F-9BFC-F1587C7FA8BD","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:storwize_v5000e_firmware:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5F886288-E5BD-4B2E-8707-6FA2E56205DD","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:storwize_v5000e:-:*:*:*:*:*:*:*","matchCriteriaId":"721F3BDB-9530-49E5-900C-8913029A6A79","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:storwize_v5100_firmware:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"20D8408F-769F-4D07-BE40-644DD38650F1","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:storwize_v5100:-:*:*:*:*:*:*:*","matchCriteriaId":"38CF9525-1FF5-4941-8043-476FB3B50E32","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:storwize_v7000_firmware:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1C99EE10-DA45-4779-ACEA-79170920A676","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:storwize_v7000:-:*:*:*:*:*:*:*","matchCriteriaId":"AA2ED020-4C7B-4303-ABE6-74D46D127556","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 186678."},{"lang":"es","value":"IBM Spectrum Virtualize versión 8.3.1, podría permitir a un usuario autenticado remoto por medio de LDAP escalar sus privilegios y realizar acciones a las que no debería tener acceso. IBM X-Force ID: 186678."}],"id":"CVE-2020-4686","lastModified":"2026-06-17T03:20:21.237","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":5.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","version":"2.0"},"exploitabilityScore":8.0,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.0"},"exploitabilityScore":1.6,"impactScore":5.2,"source":"psirt@us.ibm.com","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-08-17T13:15:12.490","references":[{"source":"psirt@us.ibm.com","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/186678"},{"source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/6260199"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/186678"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/6260199"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|