CVE-2020-4284

Опубликовано: 08 апр. 2020

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176207.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/176207
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6172551
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/176207
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6172551
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_information_queue:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_information_queue:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_information_queue:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_information_queue:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_information_queue:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_information_queue:1.0.5:*:*:*:*:*:*:*

EPSS

Процентиль: 34%

0.00139

Низкий

5.3 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-613

Связанные уязвимости

GHSA-7vvv-776g-xxjv

github

больше 3 лет назад

EPSS

Процентиль: 34%

0.00139

Низкий

5.3 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-613