Information Disclosure Vulnerability in IBM WebSphere eXtreme Scale
CVE-2020-4336

3.7LOW

Key Information:

Vendor

IBM
Status
Websphere Extreme Scale
Vendor
CVE Published:
6 January 2021

What is CVE-2020-4336?

IBM WebSphere eXtreme Scale 8.6.1 is susceptible to an information disclosure vulnerability due to the storage of sensitive information in URL parameters. If these URLs are accessed by unauthorized parties via server logs, referrer headers, or browser history, there is a risk of exposing confidential data. To mitigate risks associated with this vulnerability, it is recommended to review access controls and monitor for unintended URL disclosures.

Affected Version(s)

WebSphere eXtreme Scale 8.6.1

References

https://www.ibm.com/support/pages/node/6397682
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/177932
vdb-entryx_refsource_XF

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.