CVE-2020-4627: Critical severity ibm cloud pak for security vulnerability

Q: What is CVE-2020-4627?

CVE-2020-4627 is a vulnerability in IBM Cloud Pak for Security (CP4S) that allows a remote attacker to execute arbitrary commands on the system through CVS injection.

Q: How severe is CVE-2020-4627?

CVE-2020-4627 has a severity level of critical with a value of 9.

Q: How does CVE-2020-4627 affect IBM Cloud Pak for Security?

CVE-2020-4627 potentially affects IBM Cloud Pak for Security 1.3.0.1 and allows a remote attacker to execute arbitrary commands on the system.

Q: What is the CWE ID for CVE-2020-4627?

The CWE ID for CVE-2020-4627 is 1236.

Q: How can I fix CVE-2020-4627 in IBM Cloud Pak for Security?

To fix CVE-2020-4627 in IBM Cloud Pak for Security, apply the necessary patches provided by IBM.

Published Nov 13, 2020

Updated

IBM Cloud Pak for Security (CP4S) potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents.

Other sources

IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 185367.

Affected Software

2 affected components

IBM Cloud Pak for Security=1.3.0.1

IBM Cloud Pak for Security (CP4S)<=1.3.0.1

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6372538

Event History

Nov 13, 2020

CVE Published

via IBM·12:00 AM

Nov 30, 2020

CVE Published

via MITRE·03:30 PM

Data Sourced

via MITRE·03:30 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6372538

Frequently Asked Questions

What is CVE-2020-4627?

CVE-2020-4627 is a vulnerability in IBM Cloud Pak for Security (CP4S) that allows a remote attacker to execute arbitrary commands on the system through CVS injection.

How severe is CVE-2020-4627?