1. CVE-Search
  2. CVE-2020-4788
ID CVE-2020-4788
Summary IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296.
References
Vulnerable Configurations
  • cpe:2.3:a:ibm:vios:3.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:vios:3.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:vios:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:vios:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:vios:3.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:vios:3.1.2:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:aix:7.1.0:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:7.1.0:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:aix:7.1.5:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:7.1.5:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:aix:7.2.0:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:7.2.0:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:aix:7.2.3:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:7.2.3:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:aix:7.2.4:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:7.2.4:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:aix:7.2.5:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:7.2.5:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:power9:-:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:power9:-:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.1:*:*:*:*:*:*:*
CVSS
Base: 1.9 (as of 03-02-2023 - 14:59)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:M/Au:N/C:P/I:N/A:N
refmap via4
confirm https://www.ibm.com/support/pages/node/6370729
fedora
  • FEDORA-2020-4700a73bd5
  • FEDORA-2020-8c15928d23
mlist
  • [oss-security] 20201120 CVE-2020-4788: Speculation on incompletely validated data on IBM Power9
  • [oss-security] 20201123 Re: CVE-2020-4788: Speculation on incompletely validated data on IBM Power9
xf ibm-i-cve20204788-info-disc (189296)
Last major update 03-02-2023 - 14:59
Published 20-11-2020 - 04:15
Last modified 03-02-2023 - 14:59
Back to Top