CVE-2020-4140

Name of the Vulnerable Software and Affected Versions: IBM Security SiteProtector System version 3.1.1

Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session.

Recommendations: For IBM Security SiteProtector System version 3.1.1, consider disabling the Web UI functionality until a patch is available to prevent the embedding of arbitrary JavaScript code. Restrict access to the Web UI to minimize the risk of exploitation.