返回 CVE 瀏覽器

CVE-2020-4232

HIGH

7.5

CVSS Severity Score

EPSS Score0.0580%

EPSS Percentile13.49th

Published2020年5月28日

Last Modified2024年11月21日

Vulnerability Description

IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials which could be used to attempt further attacks against the system. IBM X-Force ID: 175336.

Affected Platforms (CPE)

📦

Ibm

Security Identity Governance And Intelligence

= 5.2.6

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/175336

🔗 https://www.ibm.com/support/pages/node/6207906

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/175336

🔗 https://www.ibm.com/support/pages/node/6207906

相關漏洞威脅

CVE-2020-49589.8

IBM Security Identity Governance and Intelligence 5.2.6 does not perform any authentication for functionality that requires a prov...

CVE-2020-47958.2

IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information to an unauthorized user using a speci...

CVE-2018-17567.5

IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker could send s...

CVE-2020-42457.5

IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by default, which...