CVE-2020-5008

IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.14 stores sensitive information in GET request parameters

Low · published June 7, 2021

CVSS v3.0
3.7
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.14 stores sensitive information in GET request parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 193033.

The record
Technical detail
CVSS v3.0
3.7 · LOW
Vector
CVSS:3.0/C:L/I:N/UI:N/A:N/S:U/AC:H/PR:N/AV:N/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00868 · 58.3th percentile
Published
2021-06-07T14:05Z
EPSS history
Timeline
  • 07 JUN 14:05Z
    IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.14 stores sensitive information in GET request parameters
    cvelistv5