6.8
Medium
CVE-2020-4385 IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which…
Description
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 179266.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Verify Gateway (IVG) 1.0 | 1.0.0 → 1.0.1 | No fix stated |
Other CVEs of Verify Gateway (IVG)
The 8 CVEs of Verify Gateway (IVG) →
CVE-2020-4405
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due…
3.1
Low
CVE-2020-4400
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker…
7.5
High
CVE-2020-4397
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an…
6.8
Medium
CVE-2020-4399
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a…
6.5
Medium