CVE-2020-4140

Description

References

• exchange.xforce.ibmcloud.com/vulnerabilities/174052 · VDB Entry
• ibm.com/support/pages/node/6515054 · Patch

More vulnerabilities in security siteprotector system

• CVE-2020-4150CRITICAL 9.8IBM SiteProtector Appliance 3.1.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inboun…
• CVE-2020-4138MEDIUM 5.5IBM SiteProtector Appliance 3.1.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174…
• CVE-2020-4146MEDIUM 5.3IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A …
• CVE-2015-0172HIGH 7.5IBM Security SiteProtector System 3.0, 3.1.0 and 3.1.1 allows remote attackers to bypass intended security restrictions and consequently exe…
• CVE-2015-0162HIGH 7.0IBM Security SiteProtector System 3.0, 3.1, and 3.1.1 allows local users to gain privileges.