PT-2020-18139
CVE-2020-4572
·
Published
2020-07-29
·
Updated
2021-07-21
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Tivoli Key Lifecycle Manager versions 3.0.1 through 4.0
Description
A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser, potentially using this information for further attacks against the system.
Recommendations
For versions 3.0.1 through 4.0, consider restricting access to error messages or implementing custom error pages to minimize the disclosure of sensitive information.
Found an issue in the description? Have something to add? Feel free to write us 👾