PT-2020-18139
CVE-2020-4572
·
تاريخ النشر
2020-07-29
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Tivoli Key Lifecycle Manager versions 3.0.1 through 4.0
Description
A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser, potentially using this information for further attacks against the system.
Recommendations
For versions 3.0.1 through 4.0, consider restricting access to error messages or implementing custom error pages to minimize the disclosure of sensitive information.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾