Authentication Bypass Vulnerability in IBM Security Identity Governance and Intelligence
CVE-2020-4958

7.4HIGH

Key Information:

Vendor
IBM
Status
Security Identity Governance And Intelligence
Vendor
CVE Published:
21 January 2021

Summary

The IBM Security Identity Governance and Intelligence version 5.2.6 contains an authentication bypass vulnerability that allows unauthorized access to functionalities that require a valid user identity. This flaw could potentially lead to significant resource consumption without proper user authentication, posing risks to system integrity. Users should take immediate action to mitigate potential threats associated with this vulnerability.

Affected Version(s)

Security Identity Governance and Intelligence 5.2.6

References

https://www.ibm.com/support/pages/node/6403247
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/192209
vdb-entryx_refsource_XF

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.