Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-4282

Опубликовано: 08 апр. 2020
Источник: nvd
CVSS3: 3
CVSS3: 4.3
CVSS2: 4
EPSS Низкий

Описание

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow an authenticated user to perform unauthorized actions by bypassing illegal character restrictions. X-Force ID: 176205.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_information_queue:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_information_queue:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_information_queue:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_information_queue:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_information_queue:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_information_queue:1.0.5:*:*:*:*:*:*:*

EPSS

Процентиль: 39%
0.00174
Низкий

3 Low

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-116

Связанные уязвимости

github
больше 3 лет назад

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow an authenticated user to perform unauthorized actions by bypassing illegal character restrictions. X-Force ID: 176205.

EPSS

Процентиль: 39%
0.00174
Низкий

3 Low

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-116