CVE-2020-4916: XSS
IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191390.
Other sources
IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-4916?
CVE-2020-4916 is a vulnerability in IBM Cloud Pak System 2.3 that allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure.
What is the severity of CVE-2020-4916?
CVE-2020-4916 has a severity rating of medium (5.5).
What is cross-site scripting (XSS)?
Cross-site scripting (XSS) is a type of vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users.
How does CVE-2020-4916 affect IBM Cloud Pak System?
CVE-2020-4916 affects IBM Cloud Pak System 2.3 by allowing users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure.
How can I fix the CVE-2020-4916 vulnerability?
To fix the CVE-2020-4916 vulnerability, it is recommended to upgrade to a version of IBM Cloud Pak System that includes a fix for this vulnerability.