PT-2020-17972
CVE-2020-4283
·
Published
2020-03-02
·
Updated
2020-03-03
Description by
CVSS 3.1
8.6
HighMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.4
Description
The issue concerns hard-coded credentials, such as a password or cryptographic key, used for inbound authentication, outbound communication to external components, or encryption of internal data.
Recommendations
For versions 1.0.0 through 1.0.4, consider removing or securely storing the hard-coded credentials to prevent unauthorized access. As a temporary workaround, restrict access to the affected components until a more secure solution is implemented.
Found an issue in the description? Have something to add? Feel free to write us 👾