CVE-2020-4292

published 2020-03-02

CVE-2020-4292: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted which could disclose sensitive information. IBM X-Force ID: 176335.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	security_information_queue	—	—
ibm	security_information_queue	—	—
ibm	security_information_queue	—	—
ibm	security_information_queue	—	—
ibm	security_information_queue	—	—

CWE-200