Skip to content
Sign in
5.9 Medium

CVE-2020-4226 IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters

Description

IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 175207.

Affected products and versions

Product Affected versions Fixed in
MobileFirst Platform Foundation 8.0.0.0 No fix stated

Other CVEs of MobileFirst Platform Foundation

The 3 CVEs of MobileFirst Platform Foundation →
CVE-2020-4229 IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session,… 5.6 Medium CVE-2017-1772 IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting 6.1 Medium
Track this CVE