CVE-2020-4690: Critical severity ibm infosphere guardium z/os vulnerability
IBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 186697.
Other sources
IBM Security Guardium contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4690?
The severity of CVE-2020-4690 is critical.
What is the affected software of CVE-2020-4690?
IBM Security Guardium versions up to and including 11.3 are affected by CVE-2020-4690.
What is the CWE (Common Weakness Enumeration) of CVE-2020-4690?
The CWE of CVE-2020-4690 is 798.
What is the reference for CVE-2020-4690?
You can find more information about CVE-2020-4690 at the following references: 1. IBM X-Force ID: 186697 2. IBM Security Guardium - https://www.ibm.com/support/pages/node/6491125
How do I fix CVE-2020-4690?
To fix CVE-2020-4690, it is recommended to upgrade to a version of IBM Security Guardium that does not contain the hard-coded credentials.