PT-2020-17895
CVE-2020-4172
·
تاريخ النشر
2020-08-27
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Security Guardium Insights version 2.0.1
Description
The issue allows for potential information disclosure due to sensitive information being stored in URL parameters. This could be accessed by unauthorized parties through server logs, referrer headers, or browser history.
Recommendations
For IBM Security Guardium Insights version 2.0.1, consider modifying the application to avoid storing sensitive information in URL parameters as a temporary workaround until a patch is available. Restrict access to server logs and ensure proper security measures are in place to protect browser history and referrer headers.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾