description: IBM Cloud Automation Manager 3.1.2 could allow a malicious user on the client side (with access to client computer) to run a custom script. IBM X-Force ID: 158278.
problem types: Gain Access
affected:
{
product: Cloud Automation Manager
vendor: IBM
versions:
status: affected, version: 3.1.2
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5
baseSeverity: MEDIUM
confidentialityImpact: NONE
exploitCodeMaturity: UNPROVEN
integrityImpact: LOW
privilegesRequired: NONE
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: CHANGED
temporalScore: 4.4
temporalSeverity: MEDIUM
userInteraction: REQUIRED
vectorString: CVSS:3.0/AC:L/A:L/C:N/PR:N/UI:R/AV:L/I:L/S:C/RL:O/RC:C/E:U
version: 3.0
]