CVE-2020-4226

IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters

Medium · published May 27, 2020

CVSS v3.0
5.9
EPSS
1%
Percentile
70.1
In the wild
Unconfirmed
What it is

IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 175207.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/PR:N/A:N/I:N/C:H/AV:N/S:U/AC:H/UI:N/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.01295 · 70.1th percentile
Published
2020-05-27T13:15Z
EPSS history
Timeline
  • 27 MAY 13:15Z
    IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters
    cvelistv5