Verify Gateway

verify_gateway

Vendor: Ibm • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-4405 1Ibm 1Verify Gateway Nov 21, 2024 Jul 27, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files. IBM X-Force ID: 179484.
CVE-2020-4400 1Ibm 1Verify Gateway Nov 21, 2024 Jul 22, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 179478.
CVE-2020-4399 1Ibm 1Verify Gateway Nov 21, 2024 Jul 22, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial of service against the server. IBM X-Force ID: 179476.
CVE-2020-4397 1Ibm 1Verify Gateway Nov 21, 2024 Jul 22, 2020 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an attacker using man in the middle techniques. IBM X-Force ID: 179428.
CVE-2020-4385 1Ibm 1Verify Gateway Nov 21, 2024 Jul 22, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encry...Show more IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 179266.Show less
CVE-2020-4372 1Ibm 1Verify Gateway Nov 21, 2024 Jul 22, 2020 N/A· v4 7.8 HIGH· v3 2.1 LOW· v2 IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 179009
CVE-2020-4371 1Ibm 1Verify Gateway Nov 21, 2024 Jul 22, 2020 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system. IBM X-Force ID: 179008.
CVE-2020-4369 1Ibm 1Verify Gateway Nov 21, 2024 Jul 22, 2020 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores highly sensitive information in cleartext that could be obtained by a user. IBM X-Force ID: 179004.