CVE-2020-4689

IBM Security Guardium 11.2 is vulnerable to CVS Injection

Medium · published October 12, 2020

CVSS v3.0
6.8
EPSS
2%
Percentile
83.6
In the wild
Unconfirmed
What it is

IBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-ForceID: 186696.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/UI:R/I:H/C:H/A:H/S:U/PR:H/AC:L/AV:N/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.02352 · 83.6th percentile
Published
2020-10-12T13:20Z
EPSS history
Timeline
  • 12 OCT 13:20Z
    IBM Security Guardium 11.2 is vulnerable to CVS Injection
    cvelistv5