Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-4788

IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296.

Published

2020-11-20T04:15:11.063

Last Modified

2024-11-21T05:33:15.377

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

  • Access Vector: LOCAL
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

3.4

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm vios 3.1.0 Yes
Application ibm vios 3.1.1 Yes
Application ibm vios 3.1.2 Yes
Operating System ibm aix 7.1.0 Yes
Operating System ibm aix 7.1.5 Yes
Operating System ibm aix 7.2.0 Yes
Operating System ibm aix 7.2.3 Yes
Operating System ibm aix 7.2.4 Yes
Operating System ibm aix 7.2.5 Yes
Operating System ibm power9 - No
Operating System fedoraproject fedora 32 Yes
Operating System fedoraproject fedora 33 Yes
Application oracle communications_cloud_native_core_binding_support_function 22.1.3 Yes
Application oracle communications_cloud_native_core_network_exposure_function 22.1.1 Yes
Application oracle communications_cloud_native_core_policy 22.2.0 Yes
References