CVE-2020-4397

Mô tả

Tham khảo

• exchange.xforce.ibmcloud.com/vulnerabilities/179428 · VDB Entry
• ibm.com/support/pages/node/6251321 · Patch

Lỗ hổng khác của verify gateway

• CVE-2020-4405TRUNG BÌNH 4.3IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log…
• CVE-2020-4400CAO 7.5IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force accoun…
• CVE-2020-4399TRUNG BÌNH 6.5IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial of service against t…
• CVE-2020-4385NGHIÊM TRỌNG 9.8IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own…
• CVE-2020-4372CAO 7.8IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 1…