cbcvebase.
CVE-2020-4890
published 2021-03-16

CVE-2020-4890: IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the REST API to cause a denial of service due…

PriorityP413medium4.4CVSS 3.1
AVLACLPRHUINSUCNINAH
EPSS
0.24%
15.2th percentile
IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the REST API to cause a denial of service due to weak or absense of rate limiting. IBM X-Force ID: 190973.

Affected

6 ranges
VendorProductVersion rangeFixed in
ibmspectrum_scale——
ibmspectrum_scale——
ibmspectrum_scale——
ibmspectrum_scale——
ibmspectrum_scale5.0.0.0 – 5.0.5.5—
ibmspectrum_scale5.1.0.0 – 5.1.0.2—

CVSS provenance

nvdv3.14.4MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
nvdv3.04.4MEDIUMCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.