CVE-2020-4342: Medium severity ibm security secret server vulnerability

Q: What is CVE-2020-4342?

CVE-2020-4342 is a vulnerability found in IBM Security Secret Server 10.7 that could disclose sensitive information included in installation files to an unauthorized user.

Q: What is the severity of CVE-2020-4342?

The severity of CVE-2020-4342 is medium, with a CVSS score of 5.3.

Q: How can an unauthorized user exploit CVE-2020-4342?

An unauthorized user can exploit CVE-2020-4342 by accessing and viewing sensitive information included in the installation files of IBM Security Secret Server 10.7.

Q: Is IBM Security Secret Server version 10.8 affected by CVE-2020-4342?

No, IBM Security Secret Server version 10.8 is not affected by CVE-2020-4342.

Q: How can I fix CVE-2020-4342?

To fix CVE-2020-4342, update IBM Security Secret Server to version 10.8 or later, which is not affected by this vulnerability.

Published Jun 17, 2020

Updated

IBM Security Secret Server 10.7 could disclose sensitive information included in installation files to an unauthorized user. IBM X-Force ID: 178182.

Other sources

IBM Security Secret Server could disclose sensitive information included in installation files to an unauthorized user.

— IBM

Affected Software

2 affected components

IBM Security Secret Server<10.8

IBM Security Secret Server<=All

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6237276

Event History

Jun 17, 2020

CVE Published

via IBM·12:00 AM

Jun 24, 2020

CVE Published

via MITRE·02:10 PM

Data Sourced

via MITRE·02:10 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6237276

Frequently Asked Questions

What is CVE-2020-4342?

CVE-2020-4342 is a vulnerability found in IBM Security Secret Server 10.7 that could disclose sensitive information included in installation files to an unauthorized user.

What is the severity of CVE-2020-4342?