Path Disclosure Vulnerability in IBM Workload Automation
CVE-2020-4674
4.3MEDIUM
Summary
A vulnerability exists in IBM Workload Automation 9.5, where sensitive server path information is unintentionally stored in URLs. This exposure potentially allows malicious actors to gather insights into the underlying server architecture, facilitating further attacks and compromising system integrity. To mitigate risks associated with this vulnerability, it is recommended to implement security best practices and monitor system access logs for any unusual activities. For more information, refer to IBM's support and vulnerability databases.
Affected Version(s)
Workload Automation 9.5
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved