CVE-2020-4805 : IBM Edge 4.2 allows web pages to be stored locally which can be read by another

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189539.

Published 2021-09-23 17:15:11

Updated 2021-09-28 21:06:13

Source IBM Corporation

View at NVD, CVE.org

Products affected by CVE-2020-4805

IBM » Edge Application Manager » Version: 4.2
cpe:2.3:a:ibm:edge_application_manager:4.2:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
4.0	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	2.5	1.4	IBM Corporation
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	1.8	1.4	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

CWE-922 Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

Assigned by: nvd@nist.gov (Primary)

https://www.ibm.com/support/pages/node/6491633

Security Bulletin: Cache control vulnerability affects IBM Edge (CVE-2020-4805).
Patch;Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/189539

IBM Edge information disclosure CVE-2020-4805 Vulnerability Report
VDB Entry;Vendor Advisory

Jump to