CVE-2020-4405

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files

Low · published July 27, 2020

CVSS v3.0
3.1
EPSS
1%
Percentile
60.0
In the wild
Unconfirmed
What it is

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files. IBM X-Force ID: 179484.

The record
Technical detail
CVSS v3.0
3.1 · LOW
Vector
CVSS:3.0/S:U/AV:N/A:N/AC:H/C:L/I:N/UI:N/PR:L/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.00922 · 60.0th percentile
Published
2020-07-27T13:31Z
EPSS history
Timeline
  • 27 JUL 13:31Z
    IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files
    cvelistv5