CVE-2020-4674: Medium severity IBM Workload Automation vulnerability
Published Jan 7, 2021
·Updated
IBM Workload Automation 9.5 stores the server path in URLs that could aid in further attacks against the system. IBM X-Force ID: 186287.
Other sources
IBM Workload Automation stores sensitive information in URLs that could aid in further attacks against the system.
— IBM
Affected Software
2 affected components
IBM Workload Automation=9.5
IBM Workload Automation<=9.5.x
Event History
Jan 7, 2021
CVE Published
via IBM·12:00 AM
Jan 12, 2021
CVE Published
via MITRE·02:45 PM
Data Sourced
via MITRE·02:45 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-4674?
CVE-2020-4674 is classified with a moderate severity due to the exposure of sensitive information.
2
How do I fix CVE-2020-4674?
To fix CVE-2020-4674, apply the latest security updates provided by IBM for Workload Automation 9.5.
3
What type of information is exposed in CVE-2020-4674?
CVE-2020-4674 exposes sensitive server path information in URLs, which could facilitate further attacks.
4
Is CVE-2020-4674 present in older versions than 9.5?
No, CVE-2020-4674 specifically affects IBM Workload Automation version 9.5.
5
How does CVE-2020-4674 impact the security of my system?
CVE-2020-4674 can enhance the risk of further attacks by revealing server paths that attackers could exploit.