PT-2020-18051
CVE-2020-4405
·
تاريخ النشر
2020-07-27
·
تاريخ التحديث
2020-07-28
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Verify Gateway (IVG) versions 1.0.0 through 1.0.1
Description
The issue could disclose potentially sensitive information to an authenticated user due to world-readable log files.
Recommendations
For versions 1.0.0 and 1.0.1, consider restricting access to the log files to prevent unauthorized disclosure of sensitive information.
As a temporary workaround, modify the log file permissions to prevent world-readable access until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾