CVE-2020-4791

CVSS 6.9 MEDIUMEPSS 0.3%

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.9EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

09 feb 2021Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain sensitive information using main in the middle attacks due to improper certificate validation. IBM X-Force ID: 189379.

CVSS:3.0/C:H/PR:N/I:L/S:C/A:N/UI:N/AV:A/AC:H/RC:C/RL:O/E:U

Productos afectados

IBM · Security Identity Governance and Intelligence

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/189379 https://www.ibm.com/support/pages/node/6403265