Security Bulletin: IBM Cloud Pak for Security (CP4S) is potentially vulnerable to CVS injection (CVE-2020-4627)

Nov 25, 2020 7:00 pm EST

Share this post:

IBM Cloud Pak for Security (CP4S) potentially vulnerable to CVS Injection due to improper data sanitization. The issue has been addressed.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
Cloud Pak for Security (CP4S)	1.3.0.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www.ibm.com/support/pages/node/6372538

See information about: IBM Security Bulletins, IBM Security Vulnerability Management (PSIRT), Reporting a Security Issue, IBM Secure Engineering

Access IBM Product Support to: Subscribe to Notifications, Download Fixes & PTFs (Fix Central), Access the Directory of IBM Worldwide Contacts

A cross-site request forgery vulnerability was addressed by IBM InfoSphere Information Server. ...read more

IBM MQ Appliance has resolved a systemd vulnerability. ...read more

IBM MQ Appliance has resolved libexpat vulnerabilities. ...read more