6.5
Medium
CVE-2020-4348 IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.4 could allow an authenticated GUI user to perform…
Description
IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.4 could allow an authenticated GUI user to perform unauthorized actions due to missing function level access control. IBM X-Force ID: 178414
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Scale 5.0 | 5.0.0.0 → 5.0.4.4 | No fix stated |
| Spectrum Scale 4.2 | 4.2.0.0 → 4.2.3.21 | No fix stated |
Other CVEs of Spectrum Scale
The 47 CVEs of Spectrum Scale →
CVE-2022-43843
IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than expected cryptographic algorithms that could allow an…
5.9
Medium
CVE-2023-30434
IBM Storage Scale (IBM Spectrum Scale 5.1.0.0 through 5.1.2.9, 5.1.3.0 through 5.1.6.1 and IBM Elastic Storage Systems…
6.2
Medium
CVE-2020-4927
A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user…
5.7
Medium
CVE-2022-43869
IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through…
6.5
Medium