CVE-2020-4164

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could expose sensitive information from applicatino errors which could be used in further attacks against the system. IBM X-Force ID: 174400.

CVSS v3 2.7 LOW
CVSS v2.0 4.0 MEDIUM

2.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/174400	VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6172605	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:security_information_queue:1.0.0:::::::*
	cpe:2.3:a:ibm:security_information_queue:1.0.1:::::::*
	cpe:2.3:a:ibm:security_information_queue:1.0.2:::::::*
	cpe:2.3:a:ibm:security_information_queue:1.0.3:::::::*
	cpe:2.3:a:ibm:security_information_queue:1.0.4:::::::*
	cpe:2.3:a:ibm:security_information_queue:1.0.5:::::::*

History

No history.

Information

Published : 2020-04-08 14:15

Updated : 2023-12-10 13:27

NVD link : CVE-2020-4164

Mitre link : CVE-2020-4164

CVE.ORG link : CVE-2020-4164

JSON object : View

Products Affected

ibm

security_information_queue

CWE

CWE-209

Generation of Error Message Containing Sensitive Information

{"id": "CVE-2020-4164", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 2.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.2}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.2}]}, "published": "2020-04-08T14:15:13.037", "references": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/174400", "tags": ["VDB Entry", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://www.ibm.com/support/pages/node/6172605", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-209"}]}], "descriptions": [{"lang": "en", "value": "IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could expose sensitive information from applicatino errors which could be used in further attacks against the system. IBM X-Force ID: 174400."}, {"lang": "es", "value": "IBM Security Information Queue (ISIQ) versiones 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4 y 1.0.5, podr\u00eda exponer informaci\u00f3n confidencial a partir de errores de aplicaci\u00f3n los cuales podr\u00edan ser usados en nuevos ataques contra el sistema. ID de IBM X-Force: 174400."}], "lastModified": "2021-07-21T11:39:23.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:security_information_queue:1.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9C1648E-DC06-40C1-9402-DCEA495EA56E"}, {"criteria": "cpe:2.3:a:ibm:security_information_queue:1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6AC11E98-3C57-436E-B47A-B5EE0ED200CD"}, {"criteria": "cpe:2.3:a:ibm:security_information_queue:1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44CEB32A-9E8E-429B-8196-CE3028B10846"}, {"criteria": "cpe:2.3:a:ibm:security_information_queue:1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "02D9F72B-B893-4E2C-993E-13873859269D"}, {"criteria": "cpe:2.3:a:ibm:security_information_queue:1.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A82CC708-3CB3-4BBB-82EF-181C18ED522B"}, {"criteria": "cpe:2.3:a:ibm:security_information_queue:1.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4B1900B-4568-4017-B0A3-9B43C484ED31"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}