CVE-2020-4405

Name of the Vulnerable Software and Affected Versions IBM Verify Gateway (IVG) versions 1.0.0 through 1.0.1

Description The issue could disclose potentially sensitive information to an authenticated user due to world-readable log files.

Recommendations For versions 1.0.0 and 1.0.1, consider restricting access to the log files to prevent unauthorized disclosure of sensitive information. As a temporary workaround, modify the log file permissions to prevent world-readable access until a fix is available.