CVE-2020-4748: XSS

Q: What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2020-4748.

Q: What is the severity of CVE-2020-4748?

The severity of CVE-2020-4748 is medium.

Q: Which software is affected by CVE-2020-4748?

IBM Spectrum Scale versions 5.0.0 through 5.0.5.2 are affected by CVE-2020-4748.

Q: What is the impact of CVE-2020-4748?

CVE-2020-4748 allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.

Q: How can I fix CVE-2020-4748?

To fix CVE-2020-4748, users should apply the necessary security updates provided by IBM.

Published Oct 16, 2020

Updated

IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188517.

Other sources

IBM Spectrum Scale is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

— IBM

Affected Software

2 affected components

IBM Spectrum Scale>5.0.0.0<=5.0.5.2

IBM Spectrum Scale<=5.0.0 - 5.0.5.2

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6349449

Event History

Oct 16, 2020

CVE Published

via IBM·12:00 AM

Oct 20, 2020

CVE Published

via MITRE·02:15 PM

Data Sourced

via MITRE·02:15 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6349449

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?