Unauthorized Action Bypass in IBM Security Information Queue
CVE-2020-4282

3LOW

Key Information:

Vendor

IBM
Status
Security Information Queue
Vendor
CVE Published:
8 April 2020

What is CVE-2020-4282?

IBM Security Information Queue allows authenticated users to exploit improper character validation, thereby enabling unauthorized actions within the application. Multiple versions of the product are susceptible to this security flaw, which could lead to significant data integrity issues if left unaddressed. For further information, visit the IBM support page and X-Force Exchange.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Security Information Queue 1.0.0

Security Information Queue 1.0.1

Security Information Queue 1.0.2

References

https://www.ibm.com/support/pages/node/6172587
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/176205
vdb-entryx_refsource_XF

CVSS V3.1

Score:
3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.