Log File Poisoning Vulnerability in IBM Spectrum Scale Products
CVE-2020-4889

4MEDIUM

Key Information:

Vendor

IBM
Status
Spectrum Scale
Vendor
CVE Published:
26 January 2021

What is CVE-2020-4889?

IBM Spectrum Scale products, specifically versions from 5.0.0 to 5.1.0, are susceptible to a vulnerability that allows local users to poison log files. This could have implications for ongoing support and development activities, possibly hindering system operations. It’s critical for organizations using these products to be aware of this issue and implement the necessary measures to mitigate potential risks.

Affected Version(s)

Spectrum Scale 5.0.0

Spectrum Scale 5.0.5.4

Spectrum Scale 5.1

References

https://www.ibm.com/support/pages/node/6405776
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/190971
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.