CVE-2020-4607

Опубликовано: 29 сент. 2020

Источник: nvd

CVSS3: 3.3

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

IBM Security Secret Server (IBM Security Verify Privilege Vault Remote 1.2 ) could allow a local user to bypass security restrictions due to improper input validation. IBM X-Force ID: 184884.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/184884
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6338813
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/184884
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6338813
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:ibm:security_verify_privilege_vault_remote_on-premises:1.3.2:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 13%

0.00044

Низкий

3.3 Low

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-f98x-c9gw-37gm

github

больше 3 лет назад

IBM Security Secret Server (IBM Security Verify Privilege Vault Remote 1.2 ) could allow a local user to bypass security restrictions due to improper input validation. IBM X-Force ID: 184884.

EPSS

Процентиль: 13%

0.00044

Низкий

3.3 Low

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-20