CVE-2020-4226

5.9MEDIUM

Key Information:

Vendor
IBM
Status
Mobilefirst Platform Foundation
Vendor
CVE Published:
27 May 2020

Summary

IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 175207.

Affected Version(s)

MobileFirst Platform Foundation 8.0.0.0

References

https://www.ibm.com/support/pages/node/6216813
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/175207
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.