Information Disclosure in IBM Emptoris Strategic Supply Management

CVE-2020-4893

What is CVE-2020-4893?

IBM Emptoris Strategic Supply Management versions 10.1.0, 10.1.1, and 10.1.3 are vulnerable due to the transmission of sensitive information through HTTP GET request parameters. This vulnerability can potentially be exploited by attackers utilizing man-in-the-middle techniques to intercept and access confidential data. Administrators should promptly assess their systems for these versions and implement necessary security measures to mitigate any risk associated with this vulnerability.

References