PT-2020-17979
CVE-2020-4292
·
تاريخ النشر
2020-03-02
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.4
Description
The issue concerns a cross-domain policy file that includes untrusted domains, potentially leading to the disclosure of sensitive information.
Recommendations
For IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.4, consider restricting access to the cross-domain policy file to minimize the risk of sensitive information disclosure until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾