CVE-2019-4633

IBM Security Secret Server 10.7 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy

Low · published January 28, 2020

CVSS v3.0
3.1
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

IBM Security Secret Server 10.7 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 170007.

The record
Technical detail
CVSS v3.0
3.1 · LOW
Vector
CVSS:3.0/A:N/S:U/UI:R/PR:N/AV:N/C:L/AC:H/I:N/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.00921 · 59.9th percentile
Published
2020-01-28T18:30Z
EPSS history
Timeline
  • 28 JAN 18:30Z
    IBM Security Secret Server 10.7 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy
    cvelistv5