Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-4795)

Summary

IBM has announced a release for IBM Security Identity Governance and Intelligence (IGI) in response to security vulnerability. The vulnerability concerns the forgot password endpoint for IBM Security Identity Manager that could reveal valid users and allow the reset of their password.

Vulnerability Details

CVEID:CVE-2020-4795
**DESCRIPTION:**IBM Security Access Manager Appliance could disclose sensitive information to an unauthorized user using a specially crafted HTTP request.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/189446 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Remediation/Fixes

Workarounds and Mitigations

None