CVE-2020-4850 Information disclosure in Spectrum Scale
Remote attackers can obtain sensitive information from leftover files in IBM Spectrum Scale Transparent Cloud Tiering configurations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-4850?
CVE-2020-4850 is a medium-severity vulnerability in IBM Spectrum Scale, published on 20 May 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
IBM Spectrum Scale 1.1.1.0 through 1.1.8.4 Transparent Cloud Tiering could allow a remote attacker to obtain sensitive information, caused by the leftover files after configuration. IBM X-Force ID: 190298.
Weakness: CWE-116
Which versions are affected by CVE-2020-4850?
It affects 1 product.
Products include Ibm Gpfs.tct.server.
How do I fix CVE-2020-4850?
No fix has been published for CVE-2020-4850 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-4850 being exploited?
There is no known exploitation of CVE-2020-4850 in the wild and no public exploit code.
Sources
Also known as GHSA-4chw-r2mf-4932.