3.7
Low
CVE-2020-4243 IBM Security Identity Governance and Intelligence 5.2.6 Virtual Appliance could allow a remote attacker to obtain…
Description
IBM Security Identity Governance and Intelligence 5.2.6 Virtual Appliance could allow a remote attacker to obtain sensitive information using man in the middle techniques due to not properly invalidating session tokens. IBM X-Force ID: 175420.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Identity Governance and Intelligence | 5.2.6 | No fix stated |
Other CVEs of Security Identity Governance and Intelligence
The 38 CVEs of Security Identity Governance and Intelligence →
CVE-2020-4970
IBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain…
5.3
Medium
CVE-2020-4957
IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that…
5.3
Medium
CVE-2020-4996
IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the…
6.5
Medium
CVE-2020-4995
IBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout which could allow a…
4.0
Medium