CVE-2020-4140

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/174052 · VDB Entry
• ibm.com/support/pages/node/6515054 · Patch

security siteprotector system のその他の脆弱性

• CVE-2020-4150緊急 9.8IBM SiteProtector Appliance 3.1.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inboun…
• CVE-2020-4138中 5.5IBM SiteProtector Appliance 3.1.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174…
• CVE-2020-4146中 5.3IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A …
• CVE-2015-0172高 7.5IBM Security SiteProtector System 3.0, 3.1.0 and 3.1.1 allows remote attackers to bypass intended security restrictions and consequently exe…
• CVE-2015-0162高 7.0IBM Security SiteProtector System 3.0, 3.1, and 3.1.1 allows local users to gain privileges.