Lucene search

IbmCVELIST:CVE-2020-4626

HistoryNov 30, 2020 - 3:30 p.m.

CVE-2020-4626

2020-11-3015:30:29

ibm

www.cve.org

ibm cloud pak sensitive info

network disclosure

x-force id: 185362

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C

AI Score

4.2

Confidence

High

EPSS

0.001

Percentile

19.6%

JSON

IBM Cloud Pak for Security 1.3.0.1 (CP4S) could reveal sensitive information about the internal network to an authenticated user using a specially crafted HTTP request. IBM X-Force ID: 185362.

CNA Affected

[
  {
    "product": "Cloud Pak for Security",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "1.3.0.1"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/185362

www.ibm.com/support/pages/node/6372534

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C

AI Score

4.2

Confidence

High

EPSS

0.001

Percentile

19.6%

JSON

Related for CVELIST:CVE-2020-4626