Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-4283

Опубликовано: 02 мар. 2020
Источник: nvd
CVSS3: 6.8
CVSS3: 8.6
CVSS2: 5
EPSS Низкий

Описание

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 176206.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_information_queue:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_information_queue:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_information_queue:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_information_queue:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_information_queue:1.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 20%
0.00064
Низкий

6.8 Medium

CVSS3

8.6 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-798

Связанные уязвимости

github
больше 3 лет назад

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 176206.

EPSS

Процентиль: 20%
0.00064
Низкий

6.8 Medium

CVSS3

8.6 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-798