CVE-2020-4290

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any…

Medium · published April 8, 2020

CVSS v3.0
4.2
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access. IBM X-Force ID: 176333.

The record
Technical detail
CVSS v3.0
4.2 · MEDIUM
Vector
CVSS:3.0/A:N/AV:N/AC:H/UI:N/C:L/PR:L/I:L/S:U/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00670 · 51.4th percentile
Published
2020-04-08T14:05Z
EPSS history
Timeline
  • 08 APR 14:05Z
    IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any…
    cvelistv5