CVE-2020-4400

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/179478 · VDB Entry
• ibm.com/support/pages/node/6251279 · Patch

verify gateway のその他の脆弱性

• CVE-2020-4405中 4.3IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log…
• CVE-2020-4399中 6.5IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial of service against t…
• CVE-2020-4397中 5.9IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an attacker using man in t…
• CVE-2020-4385緊急 9.8IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own…
• CVE-2020-4372高 7.8IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 1…