CVE-2020-4926

CRITICAL

IBM Elastic Storage System < 6.1.3.0 and Spectrum Scale < 5.1.3.0 - Missing Authorization

Title source: llm
STIX 2.1

Description

A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191600.

References (3)

Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/6589109
Patch, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/6565399
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/191600

Scores

CVSS v3 9.1
EPSS 0.0065
EPSS Percentile 46.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Details

CWE
CWE-862
Status published
Products (2)
ibm/elastic_storage_system < 6.1.3.0
ibm/spectrum_scale < 5.1.3.0
Published May 24, 2022
Tracked Since Feb 18, 2026