CVEvulnerability
CVE-2020-4164
2.7 LOW
Official page ↗
- Status
- Modified
- Published
- 2020-04-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.0 ([email protected])
- 2.7 LOW — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-209
Description
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could expose sensitive information from applicatino errors which could be used in further attacks against the system. IBM X-Force ID: 174400.
Affected configurations
• ibm security information queue 1.0.0
• ibm security information queue 1.0.1
• ibm security information queue 1.0.2
• ibm security information queue 1.0.3
• ibm security information queue 1.0.4
• ibm security information queue 1.0.5
Related
Weakness · CWE (1)
- CWE-209 Generation of Error Message Containing Sensitive Information weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/174400 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6172605 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/174400 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6172605 Patch, Vendor Advisory