Information Disclosure Vulnerability in IBM DataPower Gateway

CVE-2020-5008

What is CVE-2020-5008?

The vulnerability in IBM DataPower Gateway allows sensitive information to be inadvertently stored in GET request parameters. If unauthorized entities gain access to these URLs through server logs, referrer headers, or browser histories, they can potentially disclose sensitive data. This flaw underscores the importance of secure handling and logging of URLs involving sensitive information, as it can lead to unauthorized data exposure.

References