CVE-2020-4893

Name of the Vulnerable Software and Affected Versions IBM Emptoris Strategic Supply Management versions 10.1.0 through 10.1.3

Description The issue allows sensitive information to be transmitted in HTTP GET request parameters, potentially leading to information disclosure via man-in-the-middle methods.

Recommendations For versions 10.1.0 through 10.1.3, consider restricting the use of HTTP GET requests for sensitive information until a patch is available. As a temporary workaround, avoid using sensitive parameters in HTTP GET requests to minimize the risk of exploitation.