PT-2020-18172
CVE-2020-4626
·
تاريخ النشر
2020-11-30
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Cloud Pak for Security version 1.3.0.1
Description
The issue could reveal sensitive information about the internal network to an authenticated user using a specially crafted HTTP request.
Recommendations
For IBM Cloud Pak for Security version 1.3.0.1, consider restricting access to sensitive network information until a patch is available. As a temporary workaround, limit the use of specially crafted HTTP requests to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾