CVE-2020-4699 — Observable Discrepancy in IBM Security Access Manager

CWE-203 — Observable Discrepancy3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.1%
top 71.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Security Access ManagerIBM Security Verify Access
Timeline
PublishedOct 12
Latest updateMay 24

Description

IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186947.

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 1.6 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5ibm/security_verify_access10.0.0

🔴Vulnerability Details

2
GHSA
GHSA-gr8v-h4jg-25fm: IBM Security Access Manager 9↗2022-05-24
▶
CVEList
CVE-2020-4699: IBM Security Access Manager 9↗2020-10-12
▶
CVE-2020-4699 — Observable Discrepancy in IBM | cvebase