PT-2020-18031
CVE-2020-4369
·
Published
2020-07-22
·
Updated
2020-07-24
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Verify Gateway (IVG) versions 1.0.0 through 1.0.1
Description
The issue concerns the storage of highly sensitive information in cleartext, which could be accessed by a user.
Recommendations
For versions 1.0.0 and 1.0.1, consider implementing additional security measures to protect sensitive information, such as encryption, until a fixed version is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾