Information Disclosure Vulnerability in IBM Security Secret Server
CVE-2020-4413

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Security Secret Server
Vendor
CVE Published:
24 June 2020

What is CVE-2020-4413?

IBM Security Secret Server version 10.7 has a vulnerability that could allow remote attackers to gain access to sensitive information. This vulnerability arises from the improper implementation of HTTP Strict Transport Security (HSTS). By exploiting this flaw, attackers may launch man-in-the-middle attacks, enabling them to intercept and manipulate sensitive data transmitted over the network. Users of IBM Security Secret Server are advised to review their configurations and apply any necessary updates to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Security Secret Server 10.7

References

https://www.ibm.com/support/pages/node/6237292
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/179988
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.