CVE-2020-4324

Опубликовано: 23 сент. 2020

Источник: nvd

CVSS3: 3.5

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

IBM Security Secret Server proir to 10.9 could allow a remote attacker to bypass security restrictions, caused by improper input validation. IBM X-Force ID: 177515.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/177515
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6336361
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/177515
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6336361
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:ibm:security_secret_server:*:*:*:*:*:*:*:*

Версия до 10.9 (исключая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 10%

0.00034

Низкий

3.5 Low

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-7g9j-7jq7-5chw

github

больше 3 лет назад

IBM Security Secret Server proir to 10.9 could allow a remote attacker to bypass security restrictions, caused by improper input validation. IBM X-Force ID: 177515.

EPSS

Процентиль: 10%

0.00034

Низкий

3.5 Low

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-20