CVE-2020-4138

CVSS 4 MEDIUMEPSS 0.2%

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

11 Jul 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM SiteProtector Appliance 3.1.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174049.

CVSS:3.0/AV:L/S:U/AC:L/A:N/PR:N/UI:N/I:N/C:L/E:U/RL:O/RC:C

Affected products

References