CVE-2020-4604

CWE-312 — Cleartext Storage of Sensitive Info3 documents3 sources

Severity

4.4MEDIUM

EPSS

0.0%

top 94.38%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Security Guardium Insights

Timeline

PublishedJan 13

Latest updateMay 24

Description

IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 184861.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 0.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/security_guardium_insights2.0.2

▶NVDibm/security_guardium_insights2.0.2

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-5534-3qgp-mmmx: IBM Security Guardium Insights 2↗2022-05-24

▶

CVEList

CVE-2020-4604: IBM Security Guardium Insights 2↗2021-01-13

▶