CVE-2020-4791: Medium severity IBM Security Identity Governance and Intelligence vulnerability
IBM Security Access Manager Appliance could allow an attacker to obtain sensitive information using main in the middle attacks due to improper certificate validation.
Other sources
IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain sensitive information using main in the middle attacks due to improper certificate validation. IBM X-Force ID: 189379.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2020-4791.
What is the severity of CVE-2020-4791?
The severity of CVE-2020-4791 is medium.
Which IBM product is affected by CVE-2020-4791?
IBM Security Identity Governance and Intelligence version 5.2.6 is affected by CVE-2020-4791.
How can an attacker exploit CVE-2020-4791?
An attacker can exploit CVE-2020-4791 by performing man-in-the-middle attacks due to improper certificate validation.
Is there a fix available for CVE-2020-4791?
Yes, a fix for CVE-2020-4791 is available. Please refer to the IBM support website for details.