Lucene search
IbmCVELIST:CVE-2020-4146HistoryNov 12, 2021 - 3:20 p.m.
CVE-2020-4146
2021-11-1215:20:20
ibm
www.cve.org
1
ibm
security
siteprotector
remote
information disclosure
vulnerability
CVSS3
4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C
EPSS
0.001
Percentile
41.6%
IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing ‘HttpOnly’ flag. A remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 174129.
CNA Affected
[
{
"product": "Security SiteProtector System",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "3.1.1"
}
]
}
]Related
ibm
ibm
prion
prion
Information disclosure
2021-11-12 16:15:00
cve
cve
CVE-2020-4146
2021-11-12 16:15:07
cnvd
cnvd
IBM SiteProtector Appliance Information Disclosure Vulnerability
2021-11-12 00:00:00
nvd
nvd
CVE-2020-4146
2021-11-12 16:15:07
CVSS3
4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C
EPSS
0.001
Percentile
41.6%
Related for CVELIST:CVE-2020-4146