CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4594
https://notcve.org/view.php?id=CVE-2020-4594
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184800. IBM Security Guardium Insights versión 2.0.2, utiliza algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial. IBM X-Force ID: 184800. • https://exchange.xforce.ibmcloud.com/vulnerabilities/184800 https://www.ibm.com/support/pages/node/6403463 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4603
https://notcve.org/view.php?id=CVE-2020-4603
IBM Security Guardium Insights 2.0.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 184880. IBM Security Guardium Insights versión 2.0.1, lleva a cabo una operación en un nivel de privilegio superior al nivel mínimo requerido, lo que crea nuevas debilidades o amplifica las consecuencias de otras debilidades. IBM X-Force ID: 184880 • https://exchange.xforce.ibmcloud.com/vulnerabilities/184880 https://www.ibm.com/support/pages/node/6323297 • CWE-269: Improper Privilege Management •
CVSS: 5.9EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4175
https://notcve.org/view.php?id=CVE-2020-4175
IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 174684. IBM Security Guardium Insights versión 2.0.1, podría permitir a un atacante remoto obtener información confidencial, causada por el fallo al habilitar apropiadamente HTTP Strict Transport Security. Un atacante podría explotar esta vulnerabilidad para obtener información confidencial usando técnicas de tipo man in the middle. • https://exchange.xforce.ibmcloud.com/vulnerabilities/174684 https://www.ibm.com/support/pages/node/6323297 • CWE-862: Missing Authorization •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4172
https://notcve.org/view.php?id=CVE-2020-4172
IBM Security Guardium Insights 2.0.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 174408. IBM Security Guardium Insights versión 2.0.1, almacena información confidencial en parámetros de URL. Esto puede conllevar a una divulgación de información si partes no autorizadas presentan acceso a las URL por medio de los registros del servidor, encabezado referrer o el historial del navegador. • https://exchange.xforce.ibmcloud.com/vulnerabilities/174408 https://www.ibm.com/support/pages/node/6323297 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-4171
https://notcve.org/view.php?id=CVE-2020-4171
IBM Security Guardium Insights 2.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174407. IBM Security Guardium Insights versión 2.0.1, permite a páginas web ser almacenadas localmente, las cuales pueden ser leídas por otro usuario en el sistema. IBM X-Force ID: 174407 • https://exchange.xforce.ibmcloud.com/vulnerabilities/174407 https://www.ibm.com/support/pages/node/6323297 • CWE-922: Insecure Storage of Sensitive Information •