CVE-2020-4371

Mô tả

Tham khảo

• exchange.xforce.ibmcloud.com/vulnerabilities/179008 · VDB Entry
• ibm.com/support/pages/node/6251287 · Patch

Lỗ hổng khác của verify gateway

• CVE-2020-4405TRUNG BÌNH 4.3IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log…
• CVE-2020-4400CAO 7.5IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force accoun…
• CVE-2020-4399TRUNG BÌNH 6.5IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial of service against t…
• CVE-2020-4397TRUNG BÌNH 5.9IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an attacker using man in t…
• CVE-2020-4385NGHIÊM TRỌNG 9.8IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own…