Spoofing Vulnerability in IBM Security Information Queue
CVE-2020-4290

4.2MEDIUM

Key Information:

Vendor

IBM
Status
Security Information Queue
Vendor
CVE Published:
8 April 2020

What is CVE-2020-4290?

A spoofing vulnerability in IBM Security Information Queue allows any authenticated user to impersonate the configuration owner of another user. This can lead to unauthorized access to sensitive information and may compromise the security of the affected system. Users on versions 1.0.0 through 1.0.5 are particularly at risk, making it essential to implement patches and updates to protect against potential exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Security Information Queue 1.0.0

Security Information Queue 1.0.1

Security Information Queue 1.0.2

References

https://www.ibm.com/support/pages/node/6172599
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/176333
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.