CVE-2020-4278

HIGH 7.8CVE-2020-4278 · Published 05/03/2020 · updated 17/06/2026

In short

CVE-2020-4278 is a HIGH (CVSS 7.8) vulnerability affecting platform lsf (ibm), spectrum computing for high performance analytics (ibm), spectrum lsf (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.27%, higher than 20.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
platform lsf ibm	`= 10.1= 9.1`	No fix yet
spectrum computing for high performance analytics ibm	`= 10.2`	No fix yet
spectrum lsf ibm	`= 10.2`	No fix yet

Description

IBM Platform LSF 9.1 and 10.1, IBM Spectrum LSF Suite 10.2, and IBM Spectrum Suite for HPA 10.2 could allow a local user to escalate their privileges due to weak file permissions when specific debug settings are enabled in a Linux or Unix enviornment. IBM X-Force ID: 176137.

References

exchange.xforce.ibmcloud.com/vulnerabilities/176137 · VDB Entry
ibm.com/support/pages/node/3357549 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free