3.1
Faible
CVE-2020-4405 IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due…
Description
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files. IBM X-Force ID: 179484.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Verify Gateway (IVG) 1.0 | 1.0.0 → 1.0.1 | Pas de correctif indiqué |
Autres CVE de Verify Gateway (IVG)
Les 8 CVE de Verify Gateway (IVG) →
CVE-2020-4400
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker…
7.5
Élevée
CVE-2020-4397
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an…
6.8
Moyenne
CVE-2020-4399
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a…
6.5
Moyenne
CVE-2020-4372
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local…
6.2
Moyenne