Information Disclosure Vulnerability in IBM Security Secret Server
CVE-2020-4327
2.7LOW
Summary
IBM Security Secret Server version 10.7 is vulnerable to an information disclosure issue that allows remote attackers to gain access to sensitive data. This occurs when the server returns a detailed error message in response to user queries. Such information can be leveraged by adversaries to perform more targeted attacks on the system. Proper configuration and error handling measures are essential to mitigate this risk and protect sensitive data.
Affected Version(s)
Security Secret Server 10.7
References
CVSS V3.1
Score:
2.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved