CVE-2020-4795: High severity IBM Security Identity Governance and Intelligence vulnerability

Q: What is the vulnerability ID for this IBM Security Access Manager Appliance vulnerability?

The vulnerability ID for this IBM Security Access Manager Appliance vulnerability is CVE-2020-4795.

Q: What is the title of this vulnerability?

The title of this vulnerability is 'IBM Security Access Manager Appliance could disclose sensitive information to an unauthorized user'.

Q: What is the severity of CVE-2020-4795?

The severity of CVE-2020-4795 is high.

Q: What software is affected by CVE-2020-4795?

IBM Security Identity Governance and Intelligence 5.2.6 is affected by CVE-2020-4795.

Q: How can an unauthorized user exploit CVE-2020-4795 vulnerability?

An unauthorized user can exploit CVE-2020-4795 by using a specially crafted HTTP request.

Published Dec 22, 2020

Updated

IBM Security Access Manager Appliance could disclose sensitive information to an unauthorized user using a specially crafted HTTP request.

Other sources

IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information to an unauthorized user using a specially crafted HTTP request. IBM X-Force ID: 189446.

Affected Software

2 affected components

IBM Security Identity Governance and Intelligence=5.2.6

IBM Security Identity Governance and Intelligence<=5.2.6

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6413399

Event History

Dec 22, 2020

CVE Published

via IBM·12:00 AM

Feb 9, 2021

CVE Published

via MITRE·02:50 PM

Data Sourced

via MITRE·02:50 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6413399

Frequently Asked Questions

What is the vulnerability ID for this IBM Security Access Manager Appliance vulnerability?

The vulnerability ID for this IBM Security Access Manager Appliance vulnerability is CVE-2020-4795.

What is the title of this vulnerability?