CVE-2020-5014

IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary code on the system using a server-side…

Medium · published March 8, 2021

CVSS v3.0
6.7
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary code on the system using a server-side requesr forgery attack. IBM X-Force ID: 193247.

The record
Technical detail
CVSS v3.0
6.7 · MEDIUM
Vector
CVSS:3.0/C:H/A:H/AV:L/S:U/I:H/AC:L/UI:N/PR:H/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.00868 · 58.3th percentile
Published
2021-03-08T18:00Z
EPSS history
Timeline
  • 08 MAR 18:00Z
    IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary code on the system using a server-side…
    cvelistv5