CVE-2020-4660

Published: Oct 12, 2020Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.6 / Impact: 3.6

Source: NVD

Description

IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186140.

Affected (2)

Products: Ibm: Security Access Manager, Security Verify Access

Ibm

2 products

Security Access Manager

Security Verify Access

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Access Manager	Version 9.0.7.0
Ibm Security Verify Access	Version 10.0.0

Related CWEs

CWE-203

Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/186140

Source: psirt@us.ibm.com

VDB Entry

https://www.ibm.com/support/pages/node/6346619

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/186140

Source: af854a3a-2127-422b-91ae-364da2661108

VDB Entry

https://www.ibm.com/support/pages/node/6346619

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.