4.0
Medium
CVE-2020-4371 IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid…
Description
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system. IBM X-Force ID: 179008.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Verify Gateway (IVG) 1.0 | 1.0.0 → 1.0.1 | No fix stated |
Other CVEs of Verify Gateway (IVG)
The 8 CVEs of Verify Gateway (IVG) →
CVE-2020-4405
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due…
3.1
Low
CVE-2020-4400
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker…
7.5
High
CVE-2020-4397
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an…
6.8
Medium
CVE-2020-4399
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a…
6.5
Medium