PT-2021-12217
CVE-2020-4893
·
تاريخ النشر
2021-01-07
·
تاريخ التحديث
2021-01-08
الوصف من
CVSS 3.1
5.9
متوسطةالمقاييسI:N/S:U/C:H/UI:N/AV:N/A:N/PR:N/AC:H
Name of the Vulnerable Software and Affected Versions
IBM Emptoris Strategic Supply Management versions 10.1.0 through 10.1.3
Description
The issue allows sensitive information to be transmitted in HTTP GET request parameters, potentially leading to information disclosure via man-in-the-middle methods.
Recommendations
For versions 10.1.0 through 10.1.3, consider restricting the use of HTTP GET requests for sensitive information until a patch is available. As a temporary workaround, avoid using sensitive parameters in HTTP GET requests to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾