CVE-2020-4660

CWE-2034 documents4 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 68.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Security Access ManagerIBM Security Verify Access
Timeline
PublishedOct 12
Latest updateMay 24

Description

IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186140.

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 1.6 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5ibm/security_verify_access10.0.0

🔴Vulnerability Details

3
GHSA
GHSA-j2h4-j833-59vx: IBM Security Access Manager 9↗2022-05-24
▶
OSV
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon regression↗2020-12-13
▶
CVEList
CVE-2020-4660: IBM Security Access Manager 9↗2020-10-12
▶
CVE-2020-4660 (MEDIUM CVSS 5.3) | IBM Security Access Manager 9.0.7 a | cvebase.io