User Credential Exposure in IBM Verify Gateway by IBM
CVE-2020-4372
6.2MEDIUM
Summary
The IBM Verify Gateway (IVG) versions 1.0.0 and 1.0.1 are susceptible to a security vulnerability where user credentials are stored in plain text. This flaw allows local users to access sensitive information, heightening the risk of unauthorized access and potential account compromise. Organizations using these versions are advised to implement immediate remediation steps to safeguard against this vulnerability. For more details, you can refer to the IBM support page and the X-Force Exchange.
Affected Version(s)
Verify Gateway (IVG) 1.0.0
Verify Gateway (IVG) 1.0.1
References
CVSS V3.1
Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved