CVE-2020-4405

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/179484 · VDB Entry
• ibm.com/support/pages/node/6252479 · Patch

verify gateway のその他の脆弱性

• CVE-2020-4400高 7.5IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force accoun…
• CVE-2020-4399中 6.5IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial of service against t…
• CVE-2020-4397中 5.9IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an attacker using man in t…
• CVE-2020-4385緊急 9.8IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own…
• CVE-2020-4372高 7.8IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 1…