2 lines
6.8 KiB
JSON
2 lines
6.8 KiB
JSON
{"affected":[{"affectedData":[{"product":"VIOS","vendor":"IBM","versions":[{"status":"affected","version":"3.1"}]},{"product":"AIX","vendor":"IBM","versions":[{"status":"affected","version":"7.1"},{"status":"affected","version":"7.2"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:vios:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3939ADB4-5177-45C2-9C29-932E81D27F9E","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:vios:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B809C4C8-2FE4-4DB6-8975-4259FF705D32","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:vios:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4149DA62-D7FA-4431-8139-419AAB6EE744","vulnerable":true},{"criteria":"cpe:2.3:o:ibm:aix:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2B1C208E-967A-40B1-AD9D-AFBA78D3C317","vulnerable":true},{"criteria":"cpe:2.3:o:ibm:aix:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"48F204DE-2F8F-4854-A127-9CF20F3CEC2A","vulnerable":true},{"criteria":"cpe:2.3:o:ibm:aix:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1AE65FF3-C4F6-4BAF-85D3-CA86D16E8B60","vulnerable":true},{"criteria":"cpe:2.3:o:ibm:aix:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EF8D4C29-833C-4467-B06A-D8067AAEF3D3","vulnerable":true},{"criteria":"cpe:2.3:o:ibm:aix:7.2.4:*:*:*:*:*:*:*","matchCriteriaId":"984D9159-2FF2-4D1E-94F7-CC207C04F125","vulnerable":true},{"criteria":"cpe:2.3:o:ibm:aix:7.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AB863845-F3F4-46AD-B686-F9B6B7EF3607","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:power9:-:*:*:*:*:*:*:*","matchCriteriaId":"7BA7D79D-5032-41BC-BC5C-1029BD551FAF","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","matchCriteriaId":"36D96259-24BD-44E2-96D9-78CE1D41F956","vulnerable":true},{"criteria":"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*","matchCriteriaId":"E460AA51-FCDA-46B9-AE97-E6676AA5E194","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6EDB6772-7FDB-45FF-8D72-952902A7EE56","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9955F62A-75D3-4347-9AD3-5947FC365838","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7A6D77C7-A2F4-4700-AB5A-3EC853496ECA","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296."},{"lang":"es","value":"Los procesadores IBM Power9 (AIX versiones 7.1, 7.2 y VIOS versión 3.1), podrían permitir a un usuario local obtener información confidencial de los datos en la caché L1 en circunstancias atenuantes. IBM X-Force ID: 189296"}],"id":"CVE-2020-4788","lastModified":"2026-06-17T03:20:29.140","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"MEDIUM","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":1.9,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":3.4,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":1.4,"impactScore":3.6,"source":"psirt@us.ibm.com","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.0,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-11-20T04:15:11.063","references":[{"source":"psirt@us.ibm.com","tags":["Mailing List","Patch","Third Party Advisory"],"url":"http://www.openwall.com/lists/oss-security/2020/11/20/3"},{"source":"psirt@us.ibm.com","tags":["Mailing List","Third Party Advisory"],"url":"http://www.openwall.com/lists/oss-security/2020/11/23/1"},{"source":"psirt@us.ibm.com","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/189296"},{"source":"psirt@us.ibm.com","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TITJQPYDWZ4NB2ONJWUXW75KSQIPF35T/"},{"source":"psirt@us.ibm.com","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZF4OGZPKTAJJXWHPIFP3LHEWWEMR5LPT/"},{"source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/6370729"},{"source":"psirt@us.ibm.com","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpujul2022.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"],"url":"http://www.openwall.com/lists/oss-security/2020/11/20/3"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"http://www.openwall.com/lists/oss-security/2020/11/23/1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/189296"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TITJQPYDWZ4NB2ONJWUXW75KSQIPF35T/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZF4OGZPKTAJJXWHPIFP3LHEWWEMR5LPT/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/6370729"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpujul2022.html"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|