CVE-2020-4788

Published: Nov 20, 2020 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2020-26035 Aliases: GSD-2020-4788

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 5,1

Source: [email protected]

Attack Vector: local

Attack Complexity: high

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: none

Availability: none

LOW 1,9

Source: [email protected]

Access Vector: local

Access Complexity: medium

Authentication: none

Confidentiality: partial

Integrity: none

Availability: none

Description

AI Translation Available

IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score

0,0020

Percentile

0,4th

Updated

EPSS Score Trend (Last 90 Days)

Operating System

Aix by Ibm

Product Information

Vendor Ibm

Product Aix

Version 7.2.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:ibm:aix:7.2.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Aix by Ibm

Product Information

Vendor Ibm

Product Aix

Version 7.1.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:ibm:aix:7.1.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Fedora by Fedoraproject

Product Information

Vendor Fedoraproject

Product Fedora

Version 32

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Vios by Ibm

Product Information

Vendor Ibm

Product Vios

Version 3.1.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:ibm:vios:3.1.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Vios by Ibm

Product Information

Vendor Ibm

Product Vios

Version 3.1.2

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:ibm:vios:3.1.2:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Aix by Ibm

Product Information

Vendor Ibm

Product Aix

Version 7.1.5

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:ibm:aix:7.1.5:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Communications Cloud Native Core Binding Support Function by Oracle

Product Information

Vendor Oracle

Product Communications Cloud Native Core Binding Support Function

Version 22.1.3

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Communications Cloud Native Core Policy by Oracle

Product Information

Vendor Oracle

Product Communications Cloud Native Core Policy

Version 22.2.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.2.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Aix by Ibm

Product Information

Vendor Ibm

Product Aix

Version 7.2.4

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:ibm:aix:7.2.4:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Communications Cloud Native Core Network Exposure Function by Oracle

Product Information

Vendor Oracle

Product Communications Cloud Native Core Network Exposure Function

Version 22.1.1

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.1:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Aix by Ibm

Product Information

Vendor Ibm

Product Aix

Version 7.2.5

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:ibm:aix:7.2.5:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Vios by Ibm

Product Information

Vendor Ibm

Product Vios

Version 3.1.1

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:ibm:vios:3.1.1:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Fedora by Fedoraproject

Product Information

Vendor Fedoraproject

Product Fedora

Version 33

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Aix by Ibm

Product Information

Vendor Ibm

Product Aix

Version 7.2.3

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:ibm:aix:7.2.3:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

https://exchange.xforce.ibmcloud.com/vulnerabilities/189296

VDB Entry Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/189296

https://lists.fedoraproject.org/archives/list/package-annou…

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…

https://lists.fedoraproject.org/archives/list/package-annou…

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…

https://www.ibm.com/support/pages/node/6370729

Patch Vendor Advisory

https://www.ibm.com/support/pages/node/6370729

https://www.oracle.com/security-alerts/cpujul2022.html

Patch Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

http://www.openwall.com/lists/oss-security/2020/11/20/3

Mailing List Patch Third Party Advisory

http://www.openwall.com/lists/oss-security/2020/11/20/3

http://www.openwall.com/lists/oss-security/2020/11/23/1

Mailing List Third Party Advisory

http://www.openwall.com/lists/oss-security/2020/11/23/1

https://exchange.xforce.ibmcloud.com/vulnerabilities/189296

VDB Entry Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/189296

https://lists.fedoraproject.org/archives/list/package-annou…

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…

https://lists.fedoraproject.org/archives/list/package-annou…

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…

https://www.ibm.com/support/pages/node/6370729

Patch Vendor Advisory

https://www.ibm.com/support/pages/node/6370729

https://www.oracle.com/security-alerts/cpujul2022.html

Patch Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

http://www.openwall.com/lists/oss-security/2020/11/20/3

Mailing List Patch Third Party Advisory

http://www.openwall.com/lists/oss-security/2020/11/20/3

http://www.openwall.com/lists/oss-security/2020/11/23/1

Mailing List Third Party Advisory

http://www.openwall.com/lists/oss-security/2020/11/23/1

CVE-2020-4788

Description

EPSS (Exploit Prediction Scoring System)

EPSS (Exploit Prediction Scoring System)

EPSS Score Trend (Last 90 Days)

Aix by Ibm

Product Information

Aix by Ibm

Product Information

Fedora by Fedoraproject

Product Information

Vios by Ibm

Product Information

Vios by Ibm

Product Information

Aix by Ibm

Product Information

Communications Cloud Native Core Binding Support Function by Oracle

Product Information

Communications Cloud Native Core Policy by Oracle

Product Information

Aix by Ibm

Product Information

Communications Cloud Native Core Network Exposure Function by Oracle

Product Information

Aix by Ibm

Product Information

Vios by Ibm

Product Information

Fedora by Fedoraproject

Product Information

Aix by Ibm

Product Information

Iscriviti alla newsletter