PT-2020-17972

CVE-2020-4283

·

Published

2020-03-02

·

Updated

2020-03-03

Description by

CVSS 3.1
8.6
High
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.4
Description The issue concerns hard-coded credentials, such as a password or cryptographic key, used for inbound authentication, outbound communication to external components, or encryption of internal data.
Recommendations For versions 1.0.0 through 1.0.4, consider removing or securely storing the hard-coded credentials to prevent unauthorized access. As a temporary workaround, restrict access to the affected components until a more secure solution is implemented.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾