Path Disclosure Vulnerability in IBM Workload Automation
CVE-2020-4674

4.3MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
12 January 2021

Summary

A vulnerability exists in IBM Workload Automation 9.5, where sensitive server path information is unintentionally stored in URLs. This exposure potentially allows malicious actors to gather insights into the underlying server architecture, facilitating further attacks and compromising system integrity. To mitigate risks associated with this vulnerability, it is recommended to implement security best practices and monitor system access logs for any unusual activities. For more information, refer to IBM's support and vulnerability databases.

Affected Version(s)

Workload Automation 9.5

References

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.