CVE-2020-4686: IBM Flashsystem v5000 Firmware

High severity, CVSS 8.1. EPSS: 1.6% chance of exploitation in the next 30 days.

IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should not have access to. IBM X-Force ID: 186678.

Affected products

• IBM Flashsystem v5000 Firmware: version 8.3.1 only
• IBM Flashsystem v7200 Firmware: version 8.3.1 only
• IBM Flashsystem v9000 Firmware: version 8.3.1 only
• IBM Flashsystem v9100 Firmware: version 8.3.1 only
• IBM Flashsystem v9200 Firmware: version 8.3.1 only
• IBM San Volume Controller Firmware: version 8.3.1 only
• IBM Spectrum Virtualize: version 8.3.1 only
• IBM Storwize v5000 Firmware: version 8.3.1 only
• IBM Storwize v5000e Firmware: version 8.3.1 only
• IBM Storwize v5100 Firmware: version 8.3.1 only
• IBM Storwize v7000 Firmware: version 8.3.1 only

Published 2020-08-17. Last modified 2026-06-17.