Vulnerability Details : CVE-2020-4164
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could expose sensitive information from applicatino errors which could be used in further attacks against the system. IBM X-Force ID: 174400.
Products affected by CVE-2020-4164
- cpe:2.3:a:ibm:security_information_queue:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_information_queue:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_information_queue:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_information_queue:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_information_queue:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_information_queue:1.0.5:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-4164
0.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 17 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-4164
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
8.0
|
2.9
|
NIST | |
2.7
|
LOW | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N |
1.2
|
1.4
|
IBM Corporation | |
2.7
|
LOW | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N |
1.2
|
1.4
|
NIST |
CWE ids for CVE-2020-4164
-
The product generates an error message that includes sensitive information about its environment, users, or associated data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2020-4164
-
https://www.ibm.com/support/pages/node/6172605
Security Bulletin: IBM Security Information Queue could reveal sensitive data in application error messages (CVE-2020-4164)Patch;Vendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/174400
IBM Security Information Queue information disclosure CVE-2020-4164 Vulnerability ReportVDB Entry;Vendor Advisory
Jump to