3.1
Low
CVE-2020-4405 IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due…
Description
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files. IBM X-Force ID: 179484.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Verify Gateway (IVG) 1.0 | 1.0.0 → 1.0.1 | No fix stated |
Other CVEs of Verify Gateway (IVG)
The 8 CVEs of Verify Gateway (IVG) →
CVE-2020-4400
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker…
7.5
High
CVE-2020-4397
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an…
6.8
Medium
CVE-2020-4399
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a…
6.5
Medium
CVE-2020-4372
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local…
6.2
Medium