CVE-2020-4292

Published: Mar 2, 2020Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted which could disclose sensitive information. IBM X-Force ID: 176335.

Affected (5)

Products: Ibm: Security Information Queue

Ibm

1 product

Security Information Queue

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Information Queue	Version 1.0.0
Ibm Security Information Queue	Version 1.0.1
Ibm Security Information Queue	Version 1.0.2
Ibm Security Information Queue	Version 1.0.3
Ibm Security Information Queue	Version 1.0.4

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/176335

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/5390193

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/176335

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/5390193

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.