PT-2021-12156

CVE-2020-4674

·

Published

2021-01-12

·

Updated

2021-01-14

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Workload Automation version 9.5
Description The issue allows the storage of the server path in URLs, which could aid in further attacks against the system.
Recommendations For IBM Workload Automation version 9.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-922: Insecure Storage of Sensitive Information
Related identifiers
CVE-2020-4674
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com