CVE-2020-4282

CVSS 3 LOWEPSS 0.8%

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 3EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

08 Apr 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow an authenticated user to perform unauthorized actions by bypassing illegal character restrictions. X-Force ID: 176205.

CVSS:3.0/AV:N/A:N/UI:R/AC:H/I:L/PR:L/C:N/S:C/RL:O/RC:C/E:U

Affected products

IBM · Security Information Queue

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/176205 https://www.ibm.com/support/pages/node/6172587