CVE-2020-4726: Medium severity ibm cloud application performance management vulnerability

Q: What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2020-4726.

Q: What is the severity of CVE-2020-4726?

CVE-2020-4726 has a severity of medium (4 out of 10).

Q: Which IBM products are affected by CVE-2020-4726?

IBM Cloud APM, Base Private (version 8.1.4) and IBM Cloud APM, Advanced Private (version 8.1.4) are affected by CVE-2020-4726.

Q: How can an attacker exploit CVE-2020-4726?

An attacker can exploit CVE-2020-4726 by reading locally stored web pages in the IBM Application Performance Monitoring UI.

Q: Is there a fix available for CVE-2020-4726?

Please refer to the IBM support page (link provided) for information on how to fix CVE-2020-4726.

Published Feb 20, 2021

Updated

The IBM Application Performance Monitoring UI (IBM Cloud APM 8.1.4) allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 187975.

Other sources

The IBM Application Performance Monitoring UI allows web pages to be stored locally which can be read by another user on the system.

Affected Software

4 affected components

IBM Cloud Application Performance Management Advanced Private=8.1.4

IBM Cloud Application Performance Management Base Private=8.1.4

IBM Cloud APM, Base Private<=8.1.4

IBM Cloud APM, Advanced Private<=8.1.4

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6417137

Event History

Feb 20, 2021

CVE Published

via IBM·12:00 AM

Mar 2, 2021

CVE Published

via MITRE·04:55 PM

Data Sourced

via MITRE·04:55 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6417137

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2020-4726.

What is the severity of CVE-2020-4726?