5.9
Moyenne
CVE-2020-4160 IBM QRadar Network Security 5.4.0 and 5.5.0 could allow a remote attacker to obtain sensitive information, caused by the…
Description
IBM QRadar Network Security 5.4.0 and 5.5.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 174340.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| QRadar Network Security | 5.5.0 | Pas de correctif indiqué |
| QRadar Network Security | 5.4.0 | Pas de correctif indiqué |
Autres CVE de QRadar Network Security
Les 8 CVE de QRadar Network Security →
CVE-2020-4159
IBM QRadar Network Security 5.4.0 and 5.5.0 discloses sensitive information to unauthorized users which could be used to…
5.3
Moyenne
CVE-2020-4157
IBM QRadar Network Security 5.4.0 and 5.5.0 contains hard-coded credentials, such as a password or cryptographic key,…
6.8
Moyenne
CVE-2020-4153
IBM QRadar Network Security 5.4.0 and 5.5.0 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2020-4152
IBM QRadar Network Security 5.4.0 and 5.5.0 transmits sensitive or security-critical data in cleartext in a…
6.8
Moyenne