Information Disclosure Vulnerability in IBM Security Secret Server
CVE-2020-4327

2.7LOW

Key Information:

Vendor
IBM
Status
Security Secret Server
Vendor
CVE Published:
24 June 2020

Summary

IBM Security Secret Server version 10.7 is vulnerable to an information disclosure issue that allows remote attackers to gain access to sensitive data. This occurs when the server returns a detailed error message in response to user queries. Such information can be leveraged by adversaries to perform more targeted attacks on the system. Proper configuration and error handling measures are essential to mitigate this risk and protect sensitive data.

Affected Version(s)

Security Secret Server 10.7

References

https://www.ibm.com/support/pages/node/6237260
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/177599
vdb-entryx_refsource_XF

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.