CVEvulnerability

CVE-2020-4893

5.9 MEDIUM Published 2021-01-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.0 ([email protected])
5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-319

Description

IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters. This may lead to information disclosure via man in the middle methods. IBM X-Force ID: 190984.

Affected configurations

• ibm emptoris strategic supply management (>= 10.1.0.0 < 10.1.0.38) • ibm emptoris strategic supply management (>= 10.1.1.0 < 10.1.1.35) • ibm emptoris strategic supply management (>= 10.1.3.0 < 10.1.3.30)

Related

Weakness · CWE (1)

  • CWE-319 Cleartext Transmission of Sensitive Information weakness

References