Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-4371 State: PUBLISHED Published: 2020-07-22T20:30:34.933456Z Last Updated: 2024-09-16T18:19:30.830Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AC:L/UI:N/S:U/I:N/C:L/PR:N/AV:L/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: Verify Gateway (IVG) Problem Types: Obtain Information Description: IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system. IBM X-Force ID: 179008. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6251287 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179008
CVE ID: CVE-2020-4372 State: PUBLISHED Published: 2020-07-22T20:30:35.376728Z Last Updated: 2024-09-16T19:40:25.393Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/C:H/I:N/S:U/UI:N/AC:L/A:N/AV:L/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: Verify Gateway (IVG) Problem Types: Obtain Information Description: IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 179009 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6251289 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179009
CVE ID: CVE-2020-4375 State: PUBLISHED Published: 2020-07-28T12:05:27.198491Z Last Updated: 2024-09-16T19:25:56.520Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/A:H/AC:H/C:N/PR:N/S:U/I:N/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: MQ Appliance Problem Types: Denial of Service Description: IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker to cause a denial of service due to a memory leak caused by an error creating a dynamic queue. IBM X-Force ID: 179080. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6252785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179080
CVE ID: CVE-2020-4376 State: PUBLISHED Published: 2020-07-01T14:25:31.874715Z Last Updated: 2024-09-17T02:01:05.852Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:H/A:H/PR:L/UI:N/C:N/S:U/AV:N/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: MQ for HPE NonStop Problem Types: Denial of Service Description: IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow an attacker to cause a denial of service caused by an error within the pubsub logic. IBM X-Force ID: 179081. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6242364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179081
CVE ID: CVE-2020-4377 State: PUBLISHED Published: 2020-08-03T12:35:37.675063Z Last Updated: 2024-09-16T20:02:41.773Z Severity: HIGH (CVSS 8.2 CVSS:3.0/C:H/AC:L/PR:N/AV:N/I:N/S:U/UI:N/A:L/RC:C/E:U/RL:O) Vendors: IBM Products: Cognos Analytics Problem Types: Gain Access Description: IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 179156. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6252853 - https://exchange.xforce.ibmcloud.com/vulnerab
Container: References: - https://www.ibm.com/support/pages/node/6252853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179156
CVE ID: CVE-2020-4378 State: PUBLISHED Published: 2020-05-27T13:15:30.575633Z Last Updated: 2024-09-16T17:28:06.103Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/S:U/UI:N/AC:L/C:N/AV:N/A:N/I:H/PR:H/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Scale Problem Types: Bypass Security Description: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a privileged authenticated user to perform unauthorized actions using a specially crated HTTP POST command. IBM X-Force ID: 179157. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6214484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179157
CVE ID: CVE-2020-4379 State: PUBLISHED Published: 2020-05-27T13:15:31.065319Z Last Updated: 2024-09-16T22:56:36.092Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/C:H/AC:H/UI:N/S:U/PR:N/I:N/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Obtain Information Description: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 179158. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6214483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179158
CVE ID: CVE-2020-4380 State: PUBLISHED Published: 2020-06-11T12:10:12.062462Z Last Updated: 2024-09-16T17:53:52.681Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/PR:L/A:N/S:C/I:L/AV:N/UI:R/AC:L/C:L/E:H/RC:C/RL:O) Vendors: IBM Products: Workload Scheduler Problem Types: Cross-Site Scripting Description: IBM Workload Scheduler 9.3.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 179160. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6223030 - htt
0. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6223030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179160
CVE ID: CVE-2020-4381 State: PUBLISHED Published: 2020-08-19T12:35:18.025552Z Last Updated: 2024-09-17T01:41:09.016Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:N/UI:N/PR:L/I:N/S:U/AV:N/AC:H/A:H/E:U/RC:C/RL:O) Vendors: IBM Products: Elastic Storage Server Problem Types: Denial of Service Description: IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.6 could allow an authenticated user to cause a denial of service during deployment or upgrade if GUI specific services are enabled. IBM X-Force ID: 179162. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6261435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179162
CVE ID: CVE-2020-4382 State: PUBLISHED Published: 2020-08-24T15:30:30.747429Z Last Updated: 2024-09-16T22:30:18.561Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/I:N/UI:N/AC:L/C:N/S:U/AV:L/PR:N/A:H/RC:C/E:U/RL:O) Vendors: IBM Products: Elastic Storage Server Problem Types: Denial of Service Description: IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a denial of service during deployment or upgrade pertaining to xcat services. IBM X-Force ID: 179163. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179163
CVE ID: CVE-2020-4383 State: PUBLISHED Published: 2020-08-24T15:30:31.164845Z Last Updated: 2024-09-17T03:32:31.764Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/PR:L/A:H/I:N/AC:H/UI:N/C:N/S:U/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Elastic Storage Server Problem Types: Denial of Service Description: IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a denial of service during deployment while configuring some of the network services. IBM X-Force ID: 179165. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6320003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179165
CVE ID: CVE-2020-4384 State: PUBLISHED Published: 2020-05-06T13:45:18.686501Z Last Updated: 2024-09-16T17:02:45.975Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/I:L/AV:N/PR:L/UI:R/AC:L/C:L/S:C/RC:C/E:H/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 179265. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.c
sted session. IBM X-Force ID: 179265. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6202417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179265
CVE ID: CVE-2020-4385 State: PUBLISHED Published: 2020-07-22T20:30:35.865513Z Last Updated: 2024-09-16T17:49:18.666Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/UI:N/AC:H/C:H/I:N/S:C/PR:N/A:N/AV:N/RL:O/RC:C/E:U) Vendors: IBM Products: Verify Gateway (IVG) Problem Types: Obtain Information Description: IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 179266. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6251291 - https://exchange.xforce
t Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6251291 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179266
CVE ID: CVE-2020-4386 State: PUBLISHED Published: 2020-07-01T14:25:32.319512Z Last Updated: 2024-09-16T18:14:21.586Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AC:L/A:N/UI:N/PR:N/C:H/S:U/AV:L/I:N/RL:O/RC:C/E:U) Vendors: IBM Products: DB2 for Linux- UNIX and Windows Problem Types: Obtain Information Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to obtain sensitive information using a race condition of a symbolic link. IBM X-Force ID: 179268. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6242342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17926
eferences: - https://www.ibm.com/support/pages/node/6242342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179268
CVE ID: CVE-2020-4387 State: PUBLISHED Published: 2020-07-01T14:25:32.753616Z Last Updated: 2024-09-16T20:06:33.668Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/C:H/UI:N/PR:N/A:N/AC:L/I:N/AV:L/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux- UNIX and Windows Problem Types: Obtain Information Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to obtain sensitive information using a race condition of a symbolic link. IBM X-Force ID: 179269. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6242336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17926
eferences: - https://www.ibm.com/support/pages/node/6242336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179269
CVE ID: CVE-2020-4388 State: PUBLISHED Published: 2020-10-12T13:20:29.066763Z Last Updated: 2024-09-17T00:06:21.476Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/C:L/A:L/S:U/UI:N/I:N/AV:N/AC:L/PR:N/RC:C/RL:O/E:U) Vendors: IBM Products: Cognos Analytics Problem Types: Denial of Service Description: IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug information could also be used in future attacks. IBM X-Force ID: 179270. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6346922 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179270
CVE ID: CVE-2020-4395 State: PUBLISHED Published: 2020-10-14T16:35:14.835522Z Last Updated: 2024-09-17T00:52:22.785Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/A:L/UI:N/C:L/AC:L/S:U/I:L/AV:N/PR:L/RL:O/E:U/RC:C) Vendors: IBM Products: Security Access Manager Appliance Problem Types: Gain Privileges Description: IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 179358. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6347592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179358
CVE ID: CVE-2020-4396 State: PUBLISHED Published: 2020-08-04T16:00:25.090744Z Last Updated: 2024-09-17T03:18:48.304Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/C:L/S:C/PR:L/I:L/A:N/UI:R/AV:N/RC:C/E:H/RL:O) Vendors: IBM Products: Rational Rhapsody Design Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 179359. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com
ed session. IBM X-Force ID: 179359. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179359
CVE ID: CVE-2020-4397 State: PUBLISHED Published: 2020-07-22T20:30:36.348435Z Last Updated: 2024-09-16T16:53:52.620Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/PR:N/AV:N/A:N/AC:H/UI:N/I:N/S:C/C:H/E:U/RL:O/RC:C) Vendors: IBM Products: Verify Gateway (IVG) Problem Types: Obtain Information Description: IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an attacker using man in the middle techniques. IBM X-Force ID: 179428. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6251321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179428
CVE ID: CVE-2020-4399 State: PUBLISHED Published: 2020-07-22T20:30:36.825639Z Last Updated: 2024-09-16T19:21:00.966Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/A:H/AV:N/PR:L/C:N/I:N/S:U/UI:N/AC:L/RL:O/RC:C/E:U) Vendors: IBM Products: Verify Gateway (IVG) Problem Types: Denial of Service Description: IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial of service against the server. IBM X-Force ID: 179476. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6251323 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179476
CVE ID: CVE-2020-4400 State: PUBLISHED Published: 2020-07-22T20:30:37.302011Z Last Updated: 2024-09-17T02:31:46.925Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/UI:N/I:N/S:U/C:H/PR:N/AV:N/A:N/E:U/RC:C/RL:O) Vendors: IBM Products: Verify Gateway (IVG) Problem Types: Obtain Information Description: IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 179478. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6251279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179478
CVE ID: CVE-2020-4405 State: PUBLISHED Published: 2020-07-27T13:31:23.978913Z Last Updated: 2024-09-16T16:58:17.739Z Severity: LOW (CVSS 3.1 CVSS:3.0/S:U/AV:N/A:N/AC:H/C:L/I:N/UI:N/PR:L/RL:O/RC:C/E:U) Vendors: IBM Products: Verify Gateway (IVG) Problem Types: Obtain Information Description: IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files. IBM X-Force ID: 179484. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6252479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179484
CVE ID: CVE-2020-4406 State: PUBLISHED Published: 2020-06-15T13:25:25.338254Z Last Updated: 2024-09-17T00:15:44.616Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/C:L/PR:L/AC:L/UI:R/S:C/A:N/I:L/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Protect Client (Linux and Windows), Spectrum Protect Client (AIX), Spectrum Protect for Space Management (AIX), Spectrum Protect for Space Management (Linux) Problem Types: Gain Access Description: IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow a remote attacker to hi
t 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 179488. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6221448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179488
CVE ID: CVE-2020-4408 State: PUBLISHED Published: 2020-07-27T13:31:24.390133Z Last Updated: 2024-09-16T22:21:01.778Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AC:H/A:N/AV:P/S:U/PR:N/UI:N/I:N/C:H/E:U/RL:O/RC:C) Vendors: IBM Products: Qradar Advisor Problem Types: Obtain Information Description: The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords during input, which could be obtained by a physical attacker nearby. IBM X-Force ID: 179536. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6252401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179536
CVE ID: CVE-2020-4409 State: PUBLISHED Published: 2020-09-16T15:55:14.429944Z Last Updated: 2024-09-16T17:59:43.403Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/PR:L/C:N/UI:R/I:H/A:N/AC:L/S:C/AV:N/E:U/RL:O/RC:C) Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Access Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbing attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further at
t would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 179537. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6333091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179537
CVE ID: CVE-2020-4410 State: PUBLISHED Published: 2020-08-04T16:00:25.516660Z Last Updated: 2024-09-16T22:50:36.522Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/UI:N/A:N/I:N/S:U/PR:L/C:L/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Rational Rhapsody Design Manager Problem Types: Obtain Information Description: IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET request to read attachments on the server that they should not have access to. IBM X-Force ID: 179539. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6255694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179
References: - https://www.ibm.com/support/pages/node/6255694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179539
CVE ID: CVE-2020-4411 State: PUBLISHED Published: 2020-05-19T13:15:19.755895Z Last Updated: 2024-09-17T02:12:04.316Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AC:L/I:N/C:N/UI:N/PR:N/AV:L/S:C/A:H/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Scale Problem Types: Denial of Service Description: The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerability in its kernel module that could allow an attacker to cause a denial of service condition on the affected system. To exploit this vulnerability, a local attacker could invoke a subset of ioctls on the Spectrum Scale device with non-valid arguments. This could allow the at
attacker could invoke a subset of ioctls on the Spectrum Scale device with non-valid arguments. This could allow the attacker to crash the kernel. IBM X-Force ID: 179986. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179986
CVE ID: CVE-2020-4412 State: PUBLISHED Published: 2020-05-19T13:15:20.199553Z Last Updated: 2024-09-16T20:17:45.429Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/A:L/S:U/AV:N/PR:N/UI:N/C:N/I:N/AC:L/RL:O/E:U/RC:C) Vendors: IBM Products: Spectrum Scale Problem Types: Denial of Service Description: The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit, impacting the functionality of the Spectrum Scale cluster and the availability of file systems managed by Spectrum Scale. IBM X-Force ID: 179987. Additional Analyst Notes:
uster and the availability of file systems managed by Spectrum Scale. IBM X-Force ID: 179987. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6209004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179987
CVE ID: CVE-2020-4413 State: PUBLISHED Published: 2020-06-24T14:10:23.029835Z Last Updated: 2024-09-16T22:08:35.090Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/S:U/C:H/AC:H/A:N/I:N/UI:N/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: Security Secret Server Problem Types: Obtain Information Description: IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 179988. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages
M X-Force ID: 179988. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6237292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179988
CVE ID: CVE-2020-4414 State: PUBLISHED Published: 2020-07-01T14:25:33.201603Z Last Updated: 2024-09-16T23:21:53.683Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AC:L/A:L/PR:N/UI:N/C:L/S:U/AV:L/I:N/E:U/RC:C/RL:O) Vendors: IBM Products: DB2 for Linux- UNIX and Windows Problem Types: Obtain Information Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local attacker to perform unauthorized actions on the system, caused by improper usage of shared memory. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service. IBM X-Force ID: 179989. Additi
exploit this vulnerability to obtain sensitive information or cause a denial of service. IBM X-Force ID: 179989. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6242356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/179989
CVE ID: CVE-2020-4415 State: PUBLISHED Published: 2020-04-23T13:10:24.859780Z Last Updated: 2024-09-17T00:20:53.086Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/PR:N/AC:L/AV:N/S:U/I:H/A:H/C:H/UI:N/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect Problem Types: Gain Access Description: IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker to execute arbitrary code on the system with the privileges of an administrator or user associated with the Spectrum Protect server or cause the Spectrum Protect server to crash. IBM X-Force ID: 179990. Additional Analyst Notes: - CVE Program Container: R