CVE-2020-4660: Medium severity IBM ISAM vulnerability
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186140.
Other sources
IBM Security Access Manager Appliance could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-4660?
CVE-2020-4660 is a vulnerability in IBM Security Access Manager Appliance that could allow an attacker to obtain sensitive information using timing side channel attacks.
How does CVE-2020-4660 affect IBM Security Access Manager and IBM Security Verify Access?
CVE-2020-4660 affects IBM Security Access Manager version 9.0.7 and IBM Security Verify Access version 10.0.0.
What is the severity of CVE-2020-4660?
The severity of CVE-2020-4660 is medium, with a CVSS score of 5.3.
How can an attacker exploit CVE-2020-4660?
An attacker can exploit CVE-2020-4660 by performing timing side channel attacks to obtain sensitive information.
Are there any fixes or patches available for CVE-2020-4660?
Yes, IBM has provided a fix for CVE-2020-4660. Please refer to the IBM Support page for more information.