PT-2020-18076
CVE-2020-4459
·
Published
2020-08-04
·
Updated
2020-08-06
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM Security Verify Access version 10.7
Description
The issue concerns hard-coded credentials, including passwords or cryptographic keys, used by IBM Security Verify Access for inbound authentication, communication with external components, or internal data encryption.
Recommendations
For IBM Security Verify Access version 10.7, update to a version that removes or properly secures the hard-coded credentials to prevent unauthorized access.
Found an issue in the description? Have something to add? Feel free to write us 👾