Authentication Bypass Vulnerability in IBM Security Identity Governance and Intelligence
CVE-2020-4958
7.4HIGH
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 21 January 2021
Summary
The IBM Security Identity Governance and Intelligence version 5.2.6 contains an authentication bypass vulnerability that allows unauthorized access to functionalities that require a valid user identity. This flaw could potentially lead to significant resource consumption without proper user authentication, posing risks to system integrity. Users should take immediate action to mitigate potential threats associated with this vulnerability.
Affected Version(s)
Security Identity Governance and Intelligence 5.2.6
References
CVSS V3.1
Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved