Information Disclosure Vulnerability in IBM PowerHA Software
CVE-2020-4832

6.2MEDIUM

Key Information:

Vendor: IBM
Status: Powerha
Vendor: CVE Published:; 5 February 2021

Summary

IBM PowerHA 7.2 contains a vulnerability that may allow a local attacker to retrieve sensitive information from temporary directories following a discovery failure. This could lead to unintended exposure of confidential data, potentially compromising system integrity and user privacy. It is crucial for users to be aware of this vulnerability and take appropriate measures to secure their systems.

Affected Version(s)

PowerHA 7.2

References

https://www.ibm.com/support/pages/node/6412283

x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/189969

vdb-entryx_refsource_XF

CVSS V3.1

Score:

6.2

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Feb 5, 2021
Vulnerability Reserved
Dec 30, 2019