CVE-2020-4967

CVSS 3.1 LOWEPSS 0.7%

Vexday Risk Score

8Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 3.1EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

27 jan 2021Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through HTTP headers which could be used in further attacks against the system. IBM X-Force ID: 192425.

CVSS:3.0/I:N/PR:L/C:L/AV:N/A:N/S:U/UI:N/AC:H/E:U/RC:C/RL:O

Produtos afetados

IBM · Cloud Pak for Security

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/192425 https://www.ibm.com/support/pages/node/6408662