CVE-2020-4241

IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system

High · published March 31, 2020

Patch now

High probability of exploitation

CVSS calls it high at 7.5. It sits in the 99.3th percentile for exploit probability.

CVSS v3.0
7.5
EPSS
66%
Percentile
99.3
In the wild
Unconfirmed
What it is

IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 175418.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/UI:N/I:H/S:U/A:H/AV:N/PR:L/AC:H/C:H/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.66298 · 99.3th percentile
Published
2020-03-31T14:31Z
EPSS history
Timeline
  • 31 MAR 14:31Z
    IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system
    cvelistv5