Skip to content
OpenAdvisories
Low · 2.4 CVE-2020-4811 EUVD-2020-26058GHSA-h9g2-m48g-9g25

IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to inject inject malicious …

Published May 14, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to inject inject malicious data using a specially crafted HTTP request due to improper input validation.

Affected products

VendorProductAffectedFixed
IBM Cloud Pak for Security 1.4.0.0, 1.6.0.0, 1.5.0.1, 1.5.0.0, 1.6.0.1 —

References