4
CVE-2020-4164
- EPSS 0.14%
- Published 08.04.2020 14:15:13
- Last modified 21.11.2024 05:32:20
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could expose sensitive information from applicatino errors which could be used in further attacks against the system. IBM X-Force ID: 174400.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Security Information Queue Version1.0.0
Ibm ≫ Security Information Queue Version1.0.1
Ibm ≫ Security Information Queue Version1.0.2
Ibm ≫ Security Information Queue Version1.0.3
Ibm ≫ Security Information Queue Version1.0.4
Ibm ≫ Security Information Queue Version1.0.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.14% | 0.307 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 2.7 | 1.2 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
| psirt@us.ibm.com | 2.7 | 1.2 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
|
CWE-209 Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.