Vulnerability Name: | CVE-2020-4290 (CCN-176333) | ||||||||||||
Assigned: | 2019-12-30 | ||||||||||||
Published: | 2020-04-07 | ||||||||||||
Updated: | 2020-04-08 | ||||||||||||
Summary: | IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access. IBM X-Force ID: 176333. | ||||||||||||
CVSS v3 Severity: | 5.4 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) 4.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)
3.7 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)
| ||||||||||||
CVSS v2 Severity: | 5.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N)
| ||||||||||||
Vulnerability Type: | CWE-290 | ||||||||||||
Vulnerability Consequences: | Gain Access | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2020-4290 Source: XF Type: UNKNOWN ibm-isiq-cve20204290-spoofing(176333) Source: XF Type: VDB Entry, Vendor Advisory ibm-isiq-cve20204290-spoofing (176333) Source: CCN Type: IBM Security Bulletin 6172599 (Security Information Queue) IBM Security Information Queue does not prevent a product's owner from being modified (CVE-2020-4290) Source: CONFIRM Type: Patch, Vendor Advisory https://www.ibm.com/support/pages/node/6172599 | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||
BACK |