CVE-2020-4893

IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters

Medium · published January 7, 2021

CVSS v3.0
5.9
EPSS
1%
Percentile
50.8
In the wild
Unconfirmed
What it is

IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters. This may lead to information disclosure via man in the middle methods. IBM X-Force ID: 190984.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/I:N/S:U/C:H/UI:N/AV:N/A:N/PR:N/AC:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00657 · 50.8th percentile
Published
2021-01-07T17:40Z
EPSS history
Timeline
  • 07 JAN 17:40Z
    IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters
    cvelistv5