CVE-2020-4952: Critical severity ibm infosphere guardium z/os vulnerability
Published Jan 19, 2021
·Updated
IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028.
Other sources
IBM Security Guardium could allow an authenticated user to gain root access due to improper access control.
Affected Software
5 affected components
IBM Security Guardium<=11.1
IBM Security Guardium<=11.2
IBM Security Guardium<=11.3
IBM Security Guardium=11.2
Linux Linux kernel
Remediation
Patch Available
Event History
Jan 19, 2021
CVE Published
via IBM·12:00 AM
Jan 27, 2021
CVE Published
via MITRE·04:35 PM
Data Sourced
via MITRE·04:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-4952?
CVE-2020-4952 is considered a critical vulnerability allowing authenticated users to gain root access.
2
How do I fix CVE-2020-4952?
To fix CVE-2020-4952, users should update IBM Security Guardium to version 11.2 or later.
3
Who is affected by CVE-2020-4952?
CVE-2020-4952 affects authenticated users of IBM Security Guardium version 11.2.
4
What type of vulnerability is CVE-2020-4952?
CVE-2020-4952 is an improper access control vulnerability.
5
What products are impacted by CVE-2020-4952?
CVE-2020-4952 impacts IBM Security Guardium versions up to and including 11.2.