CVE-2020-4291

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to…

Medium · published April 8, 2020

CVSS v3.0
4.7
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176334.

The record
Technical detail
CVSS v3.0
4.7 · MEDIUM
Vector
CVSS:3.0/A:N/AV:N/UI:R/AC:L/PR:N/C:L/I:N/S:C/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.01239 · 68.9th percentile
Published
2020-04-08T14:05Z
EPSS history
Timeline
  • 08 APR 14:05Z
    IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to…
    cvelistv5