CVE-2020-4459: Critical severity ibm security secret server vulnerability
IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 181395.
Other sources
IBM Security Verify Access contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-4459?
CVE-2020-4459 refers to a vulnerability in IBM Security Verify Access 10.7 where it contains hard-coded credentials, such as a password or cryptographic key.
How severe is CVE-2020-4459?
CVE-2020-4459 has a severity keyword of 'critical' and a severity value of 9.8.
What software is affected by CVE-2020-4459?
IBM Security Secret Server versions up to and including 10.8 are affected by CVE-2020-4459.
What is the CWE ID of CVE-2020-4459?
The CWE ID of CVE-2020-4459 is 798.
How can I fix CVE-2020-4459?
To fix CVE-2020-4459, it is recommended to update IBM Security Verify Access to a patched version that no longer contains the hard-coded credentials.