Back to CVE Browser

CVE-2020-4232

HIGH

7.5

CVSS Severity Score

EPSS Score0.0580%

EPSS Percentile13.49th

PublishedMay 28, 2020

Last ModifiedNov 21, 2024

Vulnerability Description

IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials which could be used to attempt further attacks against the system. IBM X-Force ID: 175336.

Affected Platforms (CPE)

📦

Ibm

Security Identity Governance And Intelligence

= 5.2.6

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/175336

🔗 https://www.ibm.com/support/pages/node/6207906

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/175336

🔗 https://www.ibm.com/support/pages/node/6207906

Related Vulnerabilities

CVE-2020-49589.8

IBM Security Identity Governance and Intelligence 5.2.6 does not perform any authentication for functionality that requires a prov...

CVE-2020-47958.2

IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information to an unauthorized user using a speci...

CVE-2018-17567.5

IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker could send s...

CVE-2020-42457.5

IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by default, which...