CVE-2020-4278

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-03-05 · updated 2026-06-17
Weakness: CWE-732

Description

IBM Platform LSF 9.1 and 10.1, IBM Spectrum LSF Suite 10.2, and IBM Spectrum Suite for HPA 10.2 could allow a local user to escalate their privileges due to weak file permissions when specific debug settings are enabled in a Linux or Unix enviornment. IBM X-Force ID: 176137.

Affected products

IBM Platform Lsf: 9.1, 10.1
IBM Spectrum Computing For High Performance Analytics: 10.2
IBM Spectrum LSF: 10.2

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/176137
https://www.ibm.com/support/pages/node/3357549
https://exchange.xforce.ibmcloud.com/vulnerabilities/176137
https://www.ibm.com/support/pages/node/3357549

Get alerted when CVE-2020-4278 or the next vulnerability affects your stack