CVE-2020-4150

Name of the Vulnerable Software and Affected Versions IBM SiteProtector Appliance version 3.1.1

Description The issue concerns hard-coded credentials, such as a password or cryptographic key, used by the appliance for inbound authentication, outbound communication to external components, or encryption of internal data.

Recommendations For IBM SiteProtector Appliance version 3.1.1, consider changing the hard-coded credentials to unique, secure credentials to mitigate the risk of exploitation. As a temporary workaround, restrict access to the appliance until secure credentials can be implemented.