CVE-2020-4843

CWE-312 — Cleartext Storage of Sensitive Info3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.1%
top 72.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Secret Server
Timeline
PublishedDec 21
Latest updateMay 24

Description

IBM Security Secret Server 10.6 stores potentially sensitive information in config files that could be read by an authenticated user. IBM X-Force ID: 190048.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-47g9-557v-5c66: IBM Security Secret Server 10↗2022-05-24
▶
CVEList
CVE-2020-4843: IBM Security Secret Server 10↗2020-12-21
▶
CVE-2020-4843 (MEDIUM CVSS 4.3) | IBM Security Secret Server 10.6 sto | cvebase.io