PT-2021-12176

CVE-2020-4790

Published

2021-02-09

Updated

2021-02-11

Description by

CVSS 3.1

6.5

Medium

MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence version 5.2.6

Description The issue is related to improper validation of a supplied URL, which could allow a user to cause a denial of service, rendering the application unusable.

Recommendations For IBM Security Identity Governance and Intelligence version 5.2.6, update to a version that properly validates supplied URLs to prevent denial of service attacks.

Exploitability

Fix

Impacts

Researchers