CVEvulnerability
CVE-2020-4284
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-04-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-613
Description
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176207.
Affected configurations
• ibm security information queue 1.0.0
• ibm security information queue 1.0.1
• ibm security information queue 1.0.2
• ibm security information queue 1.0.3
• ibm security information queue 1.0.4
• ibm security information queue 1.0.5
Related
Weakness · not in database (1)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/176207 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6172551 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/176207 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6172551 Patch, Vendor Advisory