Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-4459

Опубликовано: 04 авг. 2020
Источник: nvd
CVSS3: 5.9
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 181395.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ibm:security_secret_server:*:*:*:*:*:*:*:*
Версия до 10.8 (исключая)

EPSS

Процентиль: 27%
0.00097
Низкий

5.9 Medium

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-798

Связанные уязвимости

github
больше 3 лет назад

IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 181395.

EPSS

Процентиль: 27%
0.00097
Низкий

5.9 Medium

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-798