Vulnerability in Ibm Spectrum Protect For Virtual Environments
CVE-2021-20532
IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their privileges to take full control of the system due to insecure directory permissions. IBM X-Force ID: 198811.
EPSS: 0.000 (6.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.4 (High). Vector: CVSS:3.0/AC:H/PR:N/C:H/UI:N/I:H/S:U/A:H/AV:L/E:U/RL:O/RC:C.
Affected products
- Ibm Spectrum Protect For Virtual Environments — versions 8.1.0.0, 8.1.11.0
References
- www.ibm.com/support/pages/node/6445503 (x_refsource_CONFIRM)
- ibm-spectrum-cve202120532-priv-escalation (198811) (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2021-20532?
- CVE-2021-20532 is a high-severity vulnerability in Ibm Spectrum Protect For Virtual Environments. CVSS score: 7.4/10. Published 2021-04-26.
- How severe is CVE-2021-20532?
- High severity. CVSS v3 base score is 7.4 out of 10.