CVE-2020-4397

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/179428 · VDB Entry
• ibm.com/support/pages/node/6251321 · Patch

verify gateway のその他の脆弱性

• CVE-2020-4405中 4.3IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log…
• CVE-2020-4400高 7.5IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force accoun…
• CVE-2020-4399中 6.5IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial of service against t…
• CVE-2020-4385緊急 9.8IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own…
• CVE-2020-4372高 7.8IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 1…