Cross-Site Scripting Vulnerability in IBM Spectrum Scale Software
CVE-2020-4748

6.1MEDIUM

Key Information:

Vendor
IBM
Status
Spectrum Scale
Vendor
CVE Published:
20 October 2020

Summary

IBM Spectrum Scale versions 5.0.0 through 5.0.5.2 are susceptible to a cross-site scripting vulnerability that allows attackers to inject arbitrary JavaScript code into the Web UI. This can potentially alter the application's behavior and expose user credentials during trusted sessions, posing significant risks to security and user data integrity.

Affected Version(s)

Spectrum Scale 5.0.0

Spectrum Scale 5.0.5.2

References

https://www.ibm.com/support/pages/node/6349449
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/188517
vdb-entryx_refsource_XF

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-4748 : Cross-Site Scripting Vulnerability in IBM Spectrum Scale Software | SecurityVulnerability.io