4.6
CVSSv2

CVE-2020-4928

Published: 04/01/2021 Updated: 05/01/2021
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 6.7 | Impact Score: 5.9 | Exploitability Score: 0.8
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

IBM Cloud Pak System 2.3 could allow a local privileged malicious user to upload arbitrary files. By intercepting the request and modifying the file extention, the attacker could execute arbitrary code on the server. IBM X-Force ID: 191705.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm cloud pak system