CVE-2020-4918 - IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager

Back Back to CVE browser

MEDIUM

IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager

Published Jan 4, 2021

4.4

MEDIUM

CVSS 3.1

EPSS 0.30%

Description

IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager. IBM X-Force ID: 191392.

Affected products

Vendor IBM Product Cloud Pak System Default
n/a
- Version
  2.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Cloud Pak System

n/a

Version	Status	Constraints
2.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-639

Authorization Bypass

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26165
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/191392
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6393554
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26165		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/191392		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6393554		x_refsource_CONFIRMPatchVendor Advisory